Overview

overview

10

Static

static

8

Android APK

android_x64

10

Analysis

  • max time kernel
    4062446s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-arm64
  • submitted
    29/07/2021, 11:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    083cc87dcf5eba8916aa006b98008c0a7ad78a1d6e7f59e09a05ccfeb60abe4e.apk
  • Size 3.0MB
  • Sample210729-dk9834wxfe
  • SHA256 083cc87dcf5eba8916aa006b98008c0a7ad78a1d6e7f59e09a05ccfeb60abe4e
  • MD5 SHA1 SHA512
Score
10/10
flubotbankerinfostealerobfuscationransomwaretrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Reads name of network operator 1 IoCs

    Uses Android APIs to discover system information.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware
  • Uses reflection 64 IoCs
    obfuscation

Processes

  • com.tencent.qqmusic
    1⤵
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    • Reads name of network operator
    • Uses Crypto APIs (Might try to encrypt user data).
    • Uses reflection
    PID:4241

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads