Overview

overview

10

Static

static

8

dcfe4d8c02...3d.apk

android_x86

10

dcfe4d8c02...3d.apk

android_x64

7

Resubmissions

05-08-2021 10:44

210805-ebgy4zjg7e 10

05-08-2021 09:33

210805-xpc438g9ts 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcfe4d8c0265186f24f56cb774f0087cfde3d46fc0d31a7edf7e036a2006513d

  • Size

    3.3MB

  • Sample

    210805-ebgy4zjg7e

  • MD5

    305c6ef783ba3db66c8b3262d0ad26d6

  • SHA1

    efd066effa3bfea6c04521a1b32c417f9d19ed34

  • SHA256

    dcfe4d8c0265186f24f56cb774f0087cfde3d46fc0d31a7edf7e036a2006513d

  • SHA512

    b625d6838cd10bb75cf4e25e97e98c3bbbbdf51c020a085ba140dd036994c1f6661efab53b4dbfd42e77f52eee11200537e8f87b851509640ac09886792e5a03

Score
10/10
flubotandroidbankerinfostealerobfuscationtrojan

Malware Config

Targets

    • Target

      dcfe4d8c0265186f24f56cb774f0087cfde3d46fc0d31a7edf7e036a2006513d

    • Size

      3.3MB

    • MD5

      305c6ef783ba3db66c8b3262d0ad26d6

    • SHA1

      efd066effa3bfea6c04521a1b32c417f9d19ed34

    • SHA256

      dcfe4d8c0265186f24f56cb774f0087cfde3d46fc0d31a7edf7e036a2006513d

    • SHA512

      b625d6838cd10bb75cf4e25e97e98c3bbbbdf51c020a085ba140dd036994c1f6661efab53b4dbfd42e77f52eee11200537e8f87b851509640ac09886792e5a03

    Score
    10/10
    flubotbankerinfostealerobfuscationtrojan

    • FluBot

      FluBot is an android banking trojan that uses overlays.

      bankertrojaninfostealerflubot

    • FluBot Payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks