Analysis
- max time kernel
1840494s - max time network
162s - platform
android_x64 - resource
android-x64-20220310-en - submitted
16/06/2022, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
2c74efb0e8304948e56f4ccb1ced6c05734842ecdc95628decacfa74d06baf6c.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2c74efb0e8304948e56f4ccb1ced6c05734842ecdc95628decacfa74d06baf6c.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
2c74efb0e8304948e56f4ccb1ced6c05734842ecdc95628decacfa74d06baf6c.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target 2c74efb0e8304948e56f4ccb1ced6c05734842ecdc95628decacfa74d06baf6c.apk
- Size 5.0MB
- Sample220616-wpjyxsbab4
- SHA256 2c74efb0e8304948e56f4ccb1ced6c05734842ecdc95628decacfa74d06baf6c
- MD5 729160d423c809ec7d4802fef9010076
- SHA1 05e887acc64b92764a7ce9156745e59b42f1144a
- SHA512 629e172df2ee3d0a2389f2dfe6cef08b034fcaf07d0136949d06b13b45514d7c98f67da0f22f7491ab9ef9eede945f4267a3604a70effa0aaee9a3b9cc18f8bf
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- FluBot
FluBot is an android banking trojan that uses overlays.
- FluBot Payload 1 IoCs
resource yara_rule behavioral2/memory/6315-0.dex family_flubot - Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.snda.wifilocating/s4Jceogvrh/fu5xmhyw4zvekxw/base.apk.4kifbfJ1.bhb 6315 com.snda.wifilocating - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.snda.wifilocating
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.snda.wifilocating/s4Jceogvrh/fu5xmhyw4zvekxw/base.apk.4kifbfJ1.bhb
- Size 2.0MB
- SHA256 fb91885f78ebd389ae76ad4c19e10626c2f076648a42248ffebc97554ff55bf7
- MD5 ee15561fb74229b06306fb6227768c53
- SHA1 81077fffc6c2b313bc53939de4f4dc760f75a42e
- SHA512 6b2f7d7d75714b25ba01018e85d2200bacfca1ee5c0024c8cdd879b1f99b58de90a2562aab193047cd760ac1c66b476ca3233da13383f2c0f072a0cc1f27be4d
- SSDEEP 24576:R+yD47leVJ3odEjthrMyynHC9S9UscN3tQ60rm7p9Y:RnRodEj/rByHEsc90qpO
- MD5 SHA1 SHA512 SSDEEP