Analysis
- max time kernel
1840858s - max time network
158s - platform
android_x64 - resource
android-x64-20220310-en - submitted
16/06/2022, 18:11
Static task
static1
Behavioral task
behavioral1
Sample
fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.apk
- Size 4.2MB
- Sample220616-ws2cdagebm
- SHA256 fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c
- MD5 37be18494cd03ea70a1fdd6270cef6e3
- SHA1 4714aaa5195da29c6e74aeee9e9f19678af5c15b
- SHA512 5452d2e545c46b94d3209b332fea6e87727039371688e2ae63ad303c014db5e7b5d4222d4dcefd703fc4a4f15e6f685ec5e62cabe396573bed0e0f78a40d679f
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- FluBot
FluBot is an android banking trojan that uses overlays.
- FluBot Payload 3 IoCs
resource yara_rule behavioral2/files/6189-0.dat family_flubot behavioral2/memory/6189-0.dex family_flubot behavioral2/memory/6189-1.dex family_flubot - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood 6189 com.tencent.mobileqq /data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood 6189 com.tencent.mobileqq - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.tencent.mobileqq
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood
- Size 6.5MB
- SHA256 6c0bd313d36ac2d0180a8ccd6d7416fc7f0f56781e00128af6a67772d46707d6
- MD5 4f3fd634a3822ebc963297b1c6e02f62
- SHA1 c7dba2509d53b8b3ad9b526b9e46ad32db3f1eab
- SHA512 6f58bc4a947e1533df435e6b7f5f9380f022e821e596fbc7939f99a9f63fda73e3b5869834a6b994c421db8ac5f15859e78ab57274ddb009e952688cd5106b41
- SSDEEP 24576:f874s/9NuvVdmyxQ+Z9hZtHUYsULG2PjAo0S5Rag9mZkwWvw/uMPfd4UYe68jwyF:fgQ59h3UUUnNL6yEuT
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood
- Size 6.5MB
- SHA256 6c0bd313d36ac2d0180a8ccd6d7416fc7f0f56781e00128af6a67772d46707d6
- MD5 4f3fd634a3822ebc963297b1c6e02f62
- SHA1 c7dba2509d53b8b3ad9b526b9e46ad32db3f1eab
- SHA512 6f58bc4a947e1533df435e6b7f5f9380f022e821e596fbc7939f99a9f63fda73e3b5869834a6b994c421db8ac5f15859e78ab57274ddb009e952688cd5106b41
- SSDEEP 24576:f874s/9NuvVdmyxQ+Z9hZtHUYsULG2PjAo0S5Rag9mZkwWvw/uMPfd4UYe68jwyF:fgQ59h3UUUnNL6yEuT
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood
- Size 6.5MB
- SHA256 6c0bd313d36ac2d0180a8ccd6d7416fc7f0f56781e00128af6a67772d46707d6
- MD5 4f3fd634a3822ebc963297b1c6e02f62
- SHA1 c7dba2509d53b8b3ad9b526b9e46ad32db3f1eab
- SHA512 6f58bc4a947e1533df435e6b7f5f9380f022e821e596fbc7939f99a9f63fda73e3b5869834a6b994c421db8ac5f15859e78ab57274ddb009e952688cd5106b41
- SSDEEP 24576:f874s/9NuvVdmyxQ+Z9hZtHUYsULG2PjAo0S5Rag9mZkwWvw/uMPfd4UYe68jwyF:fgQ59h3UUUnNL6yEuT
- MD5 SHA1 SHA512 SSDEEP