Overview

overview

10

Static

static

7

sample.apk

android_x86

10

sample.apk

android_x64

10

sample.apk

android_x64

10

Analysis

  • max time kernel
    1842289s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16/06/2022, 18:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    sample.apk
  • Size 3.4MB
  • Sample220616-w8yanagfbp
  • SHA256 50ba1da49359b0771970ab8416eaa99eed8a3780a2f8c0bed360cd55ef02fc40
  • MD5 SHA1 SHA512
Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.iqiyi.i18n
    1⤵
    • Loads dropped Dex/Jar
    PID:6199

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        classes-v1.bin
        • Path /data/user/0/com.iqiyi.i18n/app_apkprotector_dex/classes-v1.bin
        • Size 1.5MB
        • SHA256 34c5c4d996b33eb842d38507bf2f1a0728500c7b705407826d8196d3bc6e571b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        classes-v1.bin
        • Path /data/user/0/com.iqiyi.i18n/app_apkprotector_dex/classes-v1.bin
        • Size 1.5MB
        • SHA256 34c5c4d996b33eb842d38507bf2f1a0728500c7b705407826d8196d3bc6e571b
        • MD5 SHA1 SHA512 SSDEEP
        Download

        classes-v1.bin
        • Path /data/user/0/com.iqiyi.i18n/app_apkprotector_dex/classes-v1.bin
        • Size 1.5MB
        • SHA256 34c5c4d996b33eb842d38507bf2f1a0728500c7b705407826d8196d3bc6e571b
        • MD5 SHA1 SHA512 SSDEEP
        Download