Overview

overview

10

Static

static

7

Flubot49.apk

android_x86

10

Flubot49.apk

android_x64

10

Flubot49.apk

android_x64

10

Analysis

  • max time kernel
    1835959s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16/06/2022, 16:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Flubot49.apk
  • Size 4.3MB
  • Sample220616-vb9fzsaff8
  • SHA256 6e3499a5e63209b34ccc787a7ea57953ff5436b51ca4325ea0da4a958f44ea7b
  • MD5 SHA1 SHA512
Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tencent.qqpimsecure
    1⤵
    • Loads dropped Dex/Jar
    PID:6287

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.apk.hYfhdah1.jlY
        • Path /data/user/0/com.tencent.qqpimsecure/jasbjdxpfb/hnzboYGcfmmpfns/base.apk.hYfhdah1.jlY
        • Size 2.3MB
        • SHA256 789364348b5311ec2d8a529b05527c90f0fc38222f771f6e5ffa6ebddc1cf82a
        • MD5 SHA1 SHA512 SSDEEP
        Download

        multidex.version.xml
        • Path /data/user/0/com.tencent.qqpimsecure/shared_prefs/multidex.version.xml
        • Size 307B
        • SHA256 affbbf1acb22a549f07be599904abd607bd8e5a45eec9f12e15339e8a504190f
        • MD5 SHA1 SHA512
        Submit Download