Analysis
-
max time kernel
1841198s -
max time network
161s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:17
General
-
Target
a7d5405eacbc93389d694230affda4962e1f890c5bb81b89e863493665a58ca9.apk
-
Size
3.4MB
-
MD5
a94fce0a8083336cf473139a85a55b77
-
SHA1
2f80907716c46f28989b2170de553a0c371f9d16
-
SHA256
a7d5405eacbc93389d694230affda4962e1f890c5bb81b89e863493665a58ca9
-
SHA512
4e6a48f45cddd5cf7945c99fca86bd1cdcc02a64ae4c28e1322a8854f04a6c0538be7e7a15ca95af8f09d64dff316ff86d4d387d3b245b552cd0876e77f7c6a7
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 3 IoCs
-
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.iqiyi.i18n1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD54fa48f514dd9d46e00bb33becb89f6be
SHA119148c24e53b6b04020acedae9f60eed4f9db943
SHA25695b2fda9f43bb360e283a1c049fd06c686646415a0e9ebd93943df6d76dddd7e
SHA512ea0c4dd811fe357429b735a6177d729469e72d68d45319eadfd1944a9caa4a0f341ee85e69baff6e86971de8ee779828e1204408c63acfb245fc68e62cfb7e3c
-
Filesize
1.5MB
MD54fa48f514dd9d46e00bb33becb89f6be
SHA119148c24e53b6b04020acedae9f60eed4f9db943
SHA25695b2fda9f43bb360e283a1c049fd06c686646415a0e9ebd93943df6d76dddd7e
SHA512ea0c4dd811fe357429b735a6177d729469e72d68d45319eadfd1944a9caa4a0f341ee85e69baff6e86971de8ee779828e1204408c63acfb245fc68e62cfb7e3c
-
Filesize
1.5MB
MD54fa48f514dd9d46e00bb33becb89f6be
SHA119148c24e53b6b04020acedae9f60eed4f9db943
SHA25695b2fda9f43bb360e283a1c049fd06c686646415a0e9ebd93943df6d76dddd7e
SHA512ea0c4dd811fe357429b735a6177d729469e72d68d45319eadfd1944a9caa4a0f341ee85e69baff6e86971de8ee779828e1204408c63acfb245fc68e62cfb7e3c