Overview

overview

10

Static

static

7

16ff2005a5...9a.apk

android_x86

10

16ff2005a5...9a.apk

android_x64

10

16ff2005a5...9a.apk

android_x64

10

Analysis

  • max time kernel
    1842273s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16-06-2022 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    16ff2005a5edf5796cadb56258fdbd1e34f7e9a850bfb6f23a5ab5b969d47f19a.apk

  • Size

    3.3MB

  • MD5

    7e97532091767c01d5b426c4d0726fff

  • SHA1

    99828b200a44302507ed272c3fad84cc9747924d

  • SHA256

    16ff2005a5edf5796cadb56258fdbd1e34f7e9a850bfb6f23a5ab5b969d47f19

  • SHA512

    7994e440985226af7455f58e1f54bd37ad51fd27999d5c8023d240eb966111fb8058e6dcf183aeb8566d648f5f5d6d22d5f76a016649a7e7f7c5a9729792cb64

Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 3 IoCs
  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tencent.westarthk
    1⤵
    • Loads dropped Dex/Jar
    PID:6295

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.westarthk/app_ded/m4lNjCuSTxpK0qISdksGzK2xR5zzVkbe.dex
    Filesize

    1.5MB

    MD5

    1be07a7baad9b4a2a0580a8e60629658

    SHA1

    26253e76f2fa7ea97b9d406281fbd1586a1f0aaa

    SHA256

    f426adb0fc20f0ac992c3a0a5fc65bd20720aa5fe266da997c6623161c94f334

    SHA512

    c2d37b91ec1bd63ee6e5a1b3c3095d041067e6b22b643dcc24ed6853789cfd956c339e224ae7d401664792b0c6669cd5fa806d7707f78d6e502d56a5dade61a4

    Download Submit

  • /data/user/0/com.tencent.westarthk/app_ded/m4lNjCuSTxpK0qISdksGzK2xR5zzVkbe.dex
    Filesize

    1.5MB

    MD5

    1be07a7baad9b4a2a0580a8e60629658

    SHA1

    26253e76f2fa7ea97b9d406281fbd1586a1f0aaa

    SHA256

    f426adb0fc20f0ac992c3a0a5fc65bd20720aa5fe266da997c6623161c94f334

    SHA512

    c2d37b91ec1bd63ee6e5a1b3c3095d041067e6b22b643dcc24ed6853789cfd956c339e224ae7d401664792b0c6669cd5fa806d7707f78d6e502d56a5dade61a4

    Download Submit

  • /data/user/0/com.tencent.westarthk/app_ded/m4lNjCuSTxpK0qISdksGzK2xR5zzVkbe.dex
    Filesize

    1.5MB

    MD5

    1be07a7baad9b4a2a0580a8e60629658

    SHA1

    26253e76f2fa7ea97b9d406281fbd1586a1f0aaa

    SHA256

    f426adb0fc20f0ac992c3a0a5fc65bd20720aa5fe266da997c6623161c94f334

    SHA512

    c2d37b91ec1bd63ee6e5a1b3c3095d041067e6b22b643dcc24ed6853789cfd956c339e224ae7d401664792b0c6669cd5fa806d7707f78d6e502d56a5dade61a4

    Download Submit

  • /data/user/0/com.tencent.westarthk/cache/src9062664436705695146
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.tencent.westarthk/cache/src9062664436705695146/dp.kotlin-v1.lua.mph
    Filesize

    120KB

    MD5

    c384c5cdaf8f3edfa29389f2de2effea

    SHA1

    5e5dad9692cf5794e3ff7b99a64e6555399bc56f

    SHA256

    0f145035801825a43c9aba19597cb6ee6737088c4f058a66d6b87f144a046062

    SHA512

    7ea82780f2a46f8c297a35c16bb2e51136d4297fd2c4e6409b595b97d9490dfd65d00352a07ca6cd86b4f2fbfceeb5ab8d15f515395104be61629af56046c780

    Download Submit

  • /data/user/0/com.tencent.westarthk/cache/src9062664436705695146/dp.kotlin-v1.lua.mph
    Filesize

    120KB

    MD5

    c384c5cdaf8f3edfa29389f2de2effea

    SHA1

    5e5dad9692cf5794e3ff7b99a64e6555399bc56f

    SHA256

    0f145035801825a43c9aba19597cb6ee6737088c4f058a66d6b87f144a046062

    SHA512

    7ea82780f2a46f8c297a35c16bb2e51136d4297fd2c4e6409b595b97d9490dfd65d00352a07ca6cd86b4f2fbfceeb5ab8d15f515395104be61629af56046c780

    Download Submit

  • /data/user/0/com.tencent.westarthk/cache/src9062664436705695146/dp.kotlin-v1.lua.mph
    Filesize

    120KB

    MD5

    c384c5cdaf8f3edfa29389f2de2effea

    SHA1

    5e5dad9692cf5794e3ff7b99a64e6555399bc56f

    SHA256

    0f145035801825a43c9aba19597cb6ee6737088c4f058a66d6b87f144a046062

    SHA512

    7ea82780f2a46f8c297a35c16bb2e51136d4297fd2c4e6409b595b97d9490dfd65d00352a07ca6cd86b4f2fbfceeb5ab8d15f515395104be61629af56046c780

    Download Submit