Analysis
-
max time kernel
689128s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
03-06-2022 07:01
General
-
Target
1330f6b64e47a7b7b8653229bd122467329f9bfe7b5cc3218d703cf1bb41420e.apk
-
Size
6.2MB
-
MD5
57d035c7e3688b9f5e009e66da7e8372
-
SHA1
06672e330825319e1c435feed1dfdd63bd38ade0
-
SHA256
1330f6b64e47a7b7b8653229bd122467329f9bfe7b5cc3218d703cf1bb41420e
-
SHA512
03ae2f10f625bbc06749b2a90b28699763e1deb034123fedb6d92f539e79d896b317a79bb262c44803c5cb2421ef7c66ef6585ec5a5883f5bb38cc6acbe8099b
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.snda.wifilocating1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
MD5bc21df566f1770b0240b848dfd1ff39d
SHA121a1796a2f2572ac38533e63073d3f123642198d
SHA25678c617052a20163e99aaaddc7b74675a09f5ac2bfb3a39b08dd0bf974f9e273a
SHA5127332c2bd6c9cc45518ddad068c955eb4070ded71955198ab172dd3b6967499a8d3513a94df9f580c29f6dacd5ec47e8f95b241b2d78cd29dcab7198d7463a674
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e