Overview

overview

10

Static

static

7

cb8d182e01...51.apk

android_x86

10

cb8d182e01...51.apk

android_x64

10

cb8d182e01...51.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb8d182e01219a2a2cf8e568e48035b2bf568541b6c19a2f825b630217c80951

  • Size

    3.9MB

  • Sample

    220208-arjkaabbf3

  • MD5

    bab9fe33412988558aa3d9643ca56019

  • SHA1

    9a4a36a4e0fb8094091c7e34e0fb33b8d539a6e6

  • SHA256

    cb8d182e01219a2a2cf8e568e48035b2bf568541b6c19a2f825b630217c80951

  • SHA512

    73b00482812c7dcf9e53e0309b4f82ec4ec6ae7b502843693f65370edd9f60bea0a6c355f2d616af4065a3b3690490fe73093b0f691018e2c31791a02fd3df3f

Score
10/10
flubotandroidbankerinfostealerransomwaretrojan

Malware Config

Targets

    • Target

      cb8d182e01219a2a2cf8e568e48035b2bf568541b6c19a2f825b630217c80951

    • Size

      3.9MB

    • MD5

      bab9fe33412988558aa3d9643ca56019

    • SHA1

      9a4a36a4e0fb8094091c7e34e0fb33b8d539a6e6

    • SHA256

      cb8d182e01219a2a2cf8e568e48035b2bf568541b6c19a2f825b630217c80951

    • SHA512

      73b00482812c7dcf9e53e0309b4f82ec4ec6ae7b502843693f65370edd9f60bea0a6c355f2d616af4065a3b3690490fe73093b0f691018e2c31791a02fd3df3f

    Score
    10/10
    flubotbankerinfostealerransomwaretrojan

    • FluBot

      FluBot is an android banking trojan that uses overlays.

      bankertrojaninfostealerflubot

    • FluBot Payload

    • Makes use of the framework's Accessibility service.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks