Analysis
-
max time kernel
1841777s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:27
General
-
Target
65669de0e895064949130f60df5fbd94a1f30af3d5c34c8e5a22065e4334f198a.apk
-
Size
3.0MB
-
MD5
8911032f30ee0ecc589bcabfb72c0573
-
SHA1
72802bd568b2118a7de463a451cb13e20bbd88e7
-
SHA256
65669de0e895064949130f60df5fbd94a1f30af3d5c34c8e5a22065e4334f198
-
SHA512
885159589c864b92674ddba1d12516d2b7315d757c79d87bb9179b9ef28eab2a074ac921b866846902ae566250eb55ffebfc55a50af9237ad31b3c55e09c3f59
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 3 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.xunmeng.pinduoduo1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
MD55b49441a9350dd3b4dba093b8faa2c8e
SHA1bbe36075bd706b87eb7f96fc498c83088b717226
SHA256c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d
SHA512e4ce7f58ed24644094dee157d4e364c9bd4d68507bac760c760695dc2280052914bfeeb2c020f53b4e9e5da75e173bba28fd994176a4cea66d79a0e648279f94
-
Filesize
2.4MB
MD55b49441a9350dd3b4dba093b8faa2c8e
SHA1bbe36075bd706b87eb7f96fc498c83088b717226
SHA256c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d
SHA512e4ce7f58ed24644094dee157d4e364c9bd4d68507bac760c760695dc2280052914bfeeb2c020f53b4e9e5da75e173bba28fd994176a4cea66d79a0e648279f94
-
Filesize
2.4MB
MD55b49441a9350dd3b4dba093b8faa2c8e
SHA1bbe36075bd706b87eb7f96fc498c83088b717226
SHA256c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d
SHA512e4ce7f58ed24644094dee157d4e364c9bd4d68507bac760c760695dc2280052914bfeeb2c020f53b4e9e5da75e173bba28fd994176a4cea66d79a0e648279f94