Overview

overview

10

Static

static

7

fedex.apk

android_x86

10

fedex.apk

android_x64

10

fedex.apk

android_x64

10

Analysis

  • max time kernel
    1840538s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    16-06-2022 18:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fedex.apk

  • Size

    4.0MB

  • MD5

    2ffac6c6ba63598b34dc8a076208f7b4

  • SHA1

    02d20c723835a961b594ada5c5acff8ee5ed9bab

  • SHA256

    2af548766f9a368e72dfab3c5bf4123da0d52f603e405e801f79a4a9c5b5c07c

  • SHA512

    fbb2955d883d9275bfa0f7c23ca1110ceed1b13083ec249f8445c9c203fdbd9554c36ab91b7c3634871812f3661a7a0b33dc4168b2ef0f1afcff26e370468bd8

Score
10/10
flubotbankerinfostealerransomwaresuricatatrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 3 IoCs
  • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata
  • Makes use of the framework's Accessibility service. 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6987

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit