flubot | 44ea6e68941e2f3716ecaa178775d5e81008edc7a969d40c90baf85a862a7a57

Analysis

max time kernel
1841360s
max time network
151s
platform
android_x64
resource
android-x64-20220310-en
submitted
16-06-2022 18:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

44ea6e68941e2f3716ecaa178775d5e81008edc7a969d40c90baf85a862a7a57.apk
Size

3.3MB
MD5

2455e88ae54546cea448f901dd8127da
SHA1

55114bedf297893bc3022414796515e2df79d5ae
SHA256

44ea6e68941e2f3716ecaa178775d5e81008edc7a969d40c90baf85a862a7a57
SHA512

9898801d5df8c20f6c1bc06e3233a51d461cd581b4b1989a7f184809bfd92f8e47a6dcdedf11a8209e767377b4917661af75544d8ddf3ae08175aa254e027abd

Score

10^/10

flubot banker infostealer trojan

Malware Config

Signatures

FluBot
FluBot is an android banking trojan that uses overlays.
banker trojan infostealer flubot

FluBot Payload 1 IoCs

Processes:

resource	yara_rule
behavioral2/memory/6310-0.dex	family_flubot

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.tencent.qqmusic

ioc	pid	Process
/data/user/0/com.tencent.qqmusic/code_cache/secondary-dexes/base.apk.classes1.zip	6310	com.tencent.qqmusic

com.tencent.qqmusic
1⤵
- Loads dropped Dex/Jar
PID:6310

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.tencent.qqmusic/code_cache/secondary-dexes/MultiDex.lock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.tencent.qqmusic/code_cache/secondary-dexes/base.apk.classes1.zip

Filesize
2.4MB

MD5
8c1e1e8fd268c6ef44c8e8d77f590f25

SHA1
12ce51dd7ab27c0a202bb85c95b441b2f90970bb

SHA256
2047fe3136788eb566b1057d5aff87d91f337d16566e0c28f67c381c2f10d014

SHA512
c6999e0b2a4c055b203dc9212f2c89659a6e689262438896d9ef2e895fb27175dabced1368b3b6c748a4b17eb5395673ddd9eba0021b994ecd4c2c14040a43db

Download Submit
/data/user/0/com.tencent.qqmusic/code_cache/secondary-dexes/tmp-base.apk.classes67087324109265401.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.tencent.qqmusic/shared_prefs/multidex.version.xml

Filesize
307B

MD5
860fc3fb0db3a3e442041e64a40e491e

SHA1
2ed3ef1933f7c719da40c0a9409ddf4f9b009a62

SHA256
aa6be122a196f6eadbc928f7491d5372559ba445724a430ec7d28d2a9ba604ce

SHA512
9f93e5d6b8bed63c9c3a587236a22745ced77c6c0f13dfffc8ca62c26324846edd21f96a5db3252670a59335c4449d30f1416000230952785bc08af1b8e8dc03

Download Submit