Analysis
- max time kernel
2088345s - max time network
159s - platform
android_x64 - resource
android-x64 - submitted
21/01/2022, 11:45
Static task
static1
Behavioral task
behavioral1
Sample
afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295.apk
Resource
android-x86-arm
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295.apk
Resource
android-x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295.apk
Resource
android-x64-arm64
0 signatures
0 seconds
General
- Target afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295.apk
- Size 3.8MB
- Sample220121-nw4mxaghb5
- SHA256 afadb0660f18b4bab613674c319b2f032fa6fdc8702f7ff341a570f53410c295
- MD5 30f04bb14f5ef2a4f63d22c7bf425e44
- SHA1 8f60231d8cde706ef49b568921773f2dd8c1339b
- SHA512 2e39ce11c9913867850a89a02feaa9c6f0ebe472004c43595a532f809a340048839412cad57963a8ee30a03009cec8a3bfe968e7e6e7e98e4472c7081a3a93f6
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- FluBot
FluBot is an android banking trojan that uses overlays.
- FluBot Payload 2 IoCs
resource yara_rule behavioral2/memory/3810-0.dex family_flubot behavioral2/memory/3810-1.dex family_flubot - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.sina.weibo/app_apkprotector_dex/74b4WemF.vc 3810 com.sina.weibo /data/user/0/com.sina.weibo/app_apkprotector_dex/74b4WemF.vc 3810 com.sina.weibo - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.sina.weibo