Analysis
-
max time kernel
1841097s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:15
General
-
Target
4d3ea6e701b950516b89a4be889a31635e9f892705f34345017d323bfcd6e110.apk
-
Size
4.0MB
-
MD5
6f049fc4e5f85d53d1aaa158412edca3
-
SHA1
d23d638b224dbbdb6ace0bdc3271fc17a924007c
-
SHA256
4d3ea6e701b950516b89a4be889a31635e9f892705f34345017d323bfcd6e110
-
SHA512
084ade2f99dbc69de0d4c84535756da2db8f894b56f610826437d80e3747de39a08508c4411f2f2cfeef05639534a13e47e2737e0033c6b881f60781d2d20fde
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 3 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.tencent.mobileqq1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
MD53da316472c35bd207a98bfd04b4244ce
SHA14bad0a3c4627a0ebf0bcaa1e327eb243ca9d449e
SHA25658d6ae1d358508675cf791bbb3de96b8d8c97bbb960bc4075f8899cf2386baf6
SHA512e9331106619ff5dd8670471fe989d58b35dbf976f59e4fad2c8a07247d348b3eb513d3a0d6ccbb5a7620183062d5a1c30abcc5a5a61c843abd2d5f436b3ce406
-
Filesize
2.7MB
MD53da316472c35bd207a98bfd04b4244ce
SHA14bad0a3c4627a0ebf0bcaa1e327eb243ca9d449e
SHA25658d6ae1d358508675cf791bbb3de96b8d8c97bbb960bc4075f8899cf2386baf6
SHA512e9331106619ff5dd8670471fe989d58b35dbf976f59e4fad2c8a07247d348b3eb513d3a0d6ccbb5a7620183062d5a1c30abcc5a5a61c843abd2d5f436b3ce406
-
Filesize
2.7MB
MD53da316472c35bd207a98bfd04b4244ce
SHA14bad0a3c4627a0ebf0bcaa1e327eb243ca9d449e
SHA25658d6ae1d358508675cf791bbb3de96b8d8c97bbb960bc4075f8899cf2386baf6
SHA512e9331106619ff5dd8670471fe989d58b35dbf976f59e4fad2c8a07247d348b3eb513d3a0d6ccbb5a7620183062d5a1c30abcc5a5a61c843abd2d5f436b3ce406