Analysis
-
max time kernel
1841134s -
max time network
164s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:16
General
-
Target
df5944f9190614f04a8818a50438dfaf3339fa95289cdc0af54f8f239eb253fd.apk
-
Size
5.0MB
-
MD5
749510b3010a45fea2d2763476e17511
-
SHA1
79589fd0ba7c1d0afc8c3d1e22ed60a38585348e
-
SHA256
df5944f9190614f04a8818a50438dfaf3339fa95289cdc0af54f8f239eb253fd
-
SHA512
b98e95c300068d9273a0e8143f2c9fec31abd8d806cd653dc83ed580a07bda1de6d442a0540e4db5a0abd86dbfd67f012aa6fdcc0ac1b6e9803b0c65bc11c3e4
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.snda.wifilocating1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
MD58f6a03d58739d551ce97c9ffe60a856e
SHA1273f2dacac5579c7f7c3af30a26ad90c1099ad6e
SHA256094a8f367da97786cf701d25c3531d2d9cd525fa201566ecded842d3504c9702
SHA512c1de4894812d9e1ca99bb49ecd3ec000b94803ca5858f846811dab7fb62e0a6867227635a16854f9861679ed440c1775db4242f590196acfa1bbae4c2fe492dc
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e