Analysis
-
max time kernel
1842225s -
max time network
163s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:34
General
-
Target
6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk
-
Size
2.6MB
-
MD5
b65b16fb181011fdaf1fa4bcc22edf5b
-
SHA1
93c3c66ede2d13c5ec2325ee0f774a6808c0d7af
-
SHA256
6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6
-
SHA512
6ea8a8c5ca4875707ac338236f9f945787a793ee125a41f8a4423d3e5b6339ddd8bf59432f17da5c1c98026001f797d0520b51bc0d16bafe68d931b202a10d76
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 3 IoCs
-
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.baidu.searchbox1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
MD516e74e8e6081d78fc2f804d30072bac1
SHA146a2b5cc24ed7bf38150336254cb97900cebfdf1
SHA2564c84e63a079fc96c2905123315fe2471f80a460747631e47bb8f9bfd36c20fb0
SHA51208e1eec4271a23d3800516984c439a93299826c7786db9cc8808a46e8c2017af0d52bebac5558c1861cd4483ee3233adda361647b62e49863f106ccc31de226c
-
Filesize
2.3MB
MD516e74e8e6081d78fc2f804d30072bac1
SHA146a2b5cc24ed7bf38150336254cb97900cebfdf1
SHA2564c84e63a079fc96c2905123315fe2471f80a460747631e47bb8f9bfd36c20fb0
SHA51208e1eec4271a23d3800516984c439a93299826c7786db9cc8808a46e8c2017af0d52bebac5558c1861cd4483ee3233adda361647b62e49863f106ccc31de226c
-
Filesize
2.3MB
MD516e74e8e6081d78fc2f804d30072bac1
SHA146a2b5cc24ed7bf38150336254cb97900cebfdf1
SHA2564c84e63a079fc96c2905123315fe2471f80a460747631e47bb8f9bfd36c20fb0
SHA51208e1eec4271a23d3800516984c439a93299826c7786db9cc8808a46e8c2017af0d52bebac5558c1861cd4483ee3233adda361647b62e49863f106ccc31de226c