Analysis

  • max time kernel
    2088345s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    21/01/2022, 11:45

General

  • Target
    afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295.apk
  • Size 3.8MB
  • Sample220121-nw4mxaghb5
  • SHA256 afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

  • FluBot Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sina.weibo
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:3810

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads