Analysis
- max time kernel
3073278s - max time network
158s - platform
android_x64 - resource
android-x64-20220310-en - submitted
12/05/2022, 07:29
Static task
static1
Behavioral task
behavioral1
Sample
739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc.apk
- Size 5.4MB
- Sample220512-jbdhrsbae3
- SHA256 739616a8a8b6081d3a28d8aae27aa54f2345529cf804a039ba840286c65b5cdc
- MD5 88bd05585cfd9d2dca31db8d259bda3a
- SHA1 fd80eb218428687a88af0d2f309c0200de79b3e5
- SHA512 e0356ba5b902a411242f55a04dce8fe494cd9c7f093e8d0f7537612fcea8fe383ce09a140e776ced79ebae0966188cccb72e10648a337bf5a8f5e603a478ee25
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- FluBot
FluBot is an android banking trojan that uses overlays.
- FluBot Payload 1 IoCs
resource yara_rule behavioral2/memory/6182-0.dex family_flubot - Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.tencent.mobileqq/yfjgfwgj8u/F8Gtjep8dgeggu7/base.apk.afyggId1.hgr 6182 com.tencent.mobileqq - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tencent.mobileqq
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.tencent.mobileqq/yfjgfwgj8u/F8Gtjep8dgeggu7/base.apk.afyggId1.hgr
- Size 2.1MB
- SHA256 49a7acf87393e2926d3165f89ed8d7aea806a54161a1608321e88c20cd64ae11
- MD5 8e2e73a141007888b4a35907150e0827
- SHA1 ba52b588dcd9b3bda0f7809a841cc84746b73905
- SHA512 1d9e9fbdfb808ac78640e020ef0a4f999e46b08facf1759071a6bba4b1d8d6aee3c52246584f9f6ababbcbc8500371f927581cbda5efc0666ba724fe38a90ee6
- SSDEEP 24576:SjHvgeX7gszLN0tw7lEhA+xlKO1Ci1bONA3:OrRGCEa+xTYJm
- MD5 SHA1 SHA512 SSDEEP