Analysis
- max time kernel
2989467s - max time network
125s - platform
android_x64 - resource
android-x64-20220310-en - submitted
11/05/2022, 08:12
Static task
static1
Behavioral task
behavioral1
Sample
4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk
- Size 6.0MB
- Sample220511-j38szsgbe3
- SHA256 4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c
- MD5 06371fc75740162de9e6275102012e6c
- SHA1 9b45243e89541ae26fea5ff2b9c7d14ff69044ed
- SHA512 c865d89143effb176c4be93fc16f54e06d248f5b7e22ffbf19754137f9da181f6d7f6019cdb28d2d7964375b1978a255c475dd3d17487fddb9fa0e4eda8bf248
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- FluBot
FluBot is an android banking trojan that uses overlays.
- FluBot Payload 1 IoCs
resource yara_rule behavioral2/memory/6214-0.dex family_flubot - Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.tencent.mobileqq/eGGggUk6i7/GI8kghfhhThU88f/base.apk.eUftgIu1.jjI 6214 com.tencent.mobileqq - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tencent.mobileqq
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.tencent.mobileqq/eGGggUk6i7/GI8kghfhhThU88f/base.apk.eUftgIu1.jjI
- Size 2.0MB
- SHA256 b1951dfd1028e85d5f62f6d5337bc9132625d4c3f972a4050e15f50daac18c2c
- MD5 50047ec0209d69081cbd555b6c385a49
- SHA1 98175443858a4f2998719a02e3446d610e7157ed
- SHA512 58a3b30b6a9315ef775bafe977b03b6e9771d764561de7c225c881b5c83d3551cd67408a2ad35504a7eb729c66c3af7158abdb18fb54df17d7a6c1fd6ebd539a
- SSDEEP 24576:jnNt//SBQMVzPaD0uLL2qF+c5SZRzvewKoJS5WN/5vLH:pN/SV+fSqF+cMC35Ex
- MD5 SHA1 SHA512 SSDEEP