Overview

overview

10

Static

static

7

DHLhMobile.apk

android_x86

10

DHLhMobile.apk

android_x64

10

DHLhMobile.apk

android_x64

10

Analysis

  • max time kernel
    2971294s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    22-03-2022 10:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DHLhMobile.apk

  • Size

    5.2MB

  • MD5

    82f848cf5943c98da62dc84c7a5d7714

  • SHA1

    f650d3a2b3f9bb53966dce00e8f0408e519721f9

  • SHA256

    8f58bd456a7ff10ae86db10cb90697d9894e9f310d139852ba3302d02ca4fe6b

  • SHA512

    88879ae32a58f3cb75552d49b365dc59824ee407a804604b77dc4ca836bf4502e842a14ad0114c48a2aa01cd7d97424369a2a2a5b7ac7a9b9f13d9c81511fa62

Score
10/10
flubotbankerinfostealerransomwaretrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.iqiyi.i18n
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6277

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads