Analysis
-
max time kernel
3190583s -
platform
android_x86 -
resource
android-x86-arm -
submitted
19-07-2021 09:47
General
-
Target
3057caca88807270b93142eb314755dec69d7cbe09fe7b9d78dce5e5c7ef4913.apk
-
Size
3.0MB
-
MD5
0334eba56e362dfa8c4aba3ee202624a
-
SHA1
acf7ded10113927a7077bffe50346d7a2387e971
-
SHA256
3057caca88807270b93142eb314755dec69d7cbe09fe7b9d78dce5e5c7ef4913
-
SHA512
596e6c3d2a42bf90f30470cf69cfbe3c71a0420232539d4fab74dc9af5282c439dd8a49ea01ff2fd3286690dc9257c70849231179ce839d81326f966612de78e
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 1 IoCs
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
-
Requests enabling of the accessibility settings. 1 IoCs
-
Uses reflection 2 IoCs
Processes
-
com.tencent.mobileqq1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Uses reflection
-
com.tencent.mobileqq2⤵
-
/system/bin/dex2oat2⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/R46Z4rn2.kingMD5
866f9cfae1e2a9a808f2e7c2f110f1e2
SHA1e5ce60e5251b2abd7174a42148a69bc0af99383b
SHA25641048c9796b81d86577624bda0527fa7eca65c0e1b8ce3cafc4d74e9aa8ac102
SHA512aee1c80d259fa5efe9277f1f4de65f31633481dbbfff14893e46d25c06701f6c32b24b54ba2d990136b7f9841fabb05836e4184f44a6261d8418e9e6d1fdf97a
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/R46Z4rn2.kingMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/R46Z4rn2.kingMD5
69b9483f8660c20636acb97f13843cf2
SHA17cf03e61e4dd25115c76a4728ea461f553530ac7
SHA2562eeee3f55a774897904bbfc4e217bbe8f4fe5f7b2eab774738b3e040a20d3ad6
SHA5127878de674fb93a47e97f76a6242c946d8735d0cded0baa97d16b39b6e8919d2600e30adbfc6dee9a07302b363bbb4a95ace8d85c16603e362b130f7b81551ead
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/R46Z4rn2.kingMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/R46Z4rn2.king.x86.flockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/oat/x86/R46Z4rn2.odexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/oat/x86/R46Z4rn2.vdexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.tencent.mobileqq/shared_prefs/Voicemail.xmlMD5
67fae47192d1a0bc8d8d8b8179dfdc36
SHA1b19408d21910a57a679ab72df194d8691b0527ca
SHA256d3677a5ca5124de3eed6ac5bacabdcfa299e9246a49013d769182c4cbd1433a0
SHA5122b6e140e8090147fb6086e6f1541ef92141085c0f87f55297ee4420a5287ed33f4c81ed91ab112e959d19bfa8f95d01f3f8252a2298cdefe46dd201887229827