Analysis
-
max time kernel
1842571s -
max time network
166s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:40
General
-
Target
d6d2b6de7856b8cb1dc803b7ea26cc7982d4f22b4cbd890c1dfe4faf14ed319d.apk
-
Size
3.3MB
-
MD5
5fcd8c59f18c7d20f46b21409ecd5b9d
-
SHA1
8ecb08a2bbbdf0e47b8d62af476708c4b5710818
-
SHA256
d6d2b6de7856b8cb1dc803b7ea26cc7982d4f22b4cbd890c1dfe4faf14ed319d
-
SHA512
a854cd6e54335458229d2a05b3334d33a3d71e0d0017972d8fefbe2f394b9ebca7e181e8bdcbc6b5ee005f6534f279ed79b67c5f8c77a7fc07a30bc167d18b7e
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 3 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.taobao.taobao1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD537efde7b0227fb70ff38da0f5cd0d56c
SHA1a95c82e26f4c5d70ee01eb144b0d0172cda58665
SHA256665cef9155e10ffdd428dba9441f4b2d0e6fe549edfb45c6f0de15dc6535298b
SHA512ae5914137c6151efd1755094c59f47cb7e40ad3b06ae08a9be1ee1d2d8fce3fae034350588989bfa1120888604d39e8e6436e042443ccc3576b4af12840b94b8
-
Filesize
1.5MB
MD537efde7b0227fb70ff38da0f5cd0d56c
SHA1a95c82e26f4c5d70ee01eb144b0d0172cda58665
SHA256665cef9155e10ffdd428dba9441f4b2d0e6fe549edfb45c6f0de15dc6535298b
SHA512ae5914137c6151efd1755094c59f47cb7e40ad3b06ae08a9be1ee1d2d8fce3fae034350588989bfa1120888604d39e8e6436e042443ccc3576b4af12840b94b8
-
Filesize
1.5MB
MD537efde7b0227fb70ff38da0f5cd0d56c
SHA1a95c82e26f4c5d70ee01eb144b0d0172cda58665
SHA256665cef9155e10ffdd428dba9441f4b2d0e6fe549edfb45c6f0de15dc6535298b
SHA512ae5914137c6151efd1755094c59f47cb7e40ad3b06ae08a9be1ee1d2d8fce3fae034350588989bfa1120888604d39e8e6436e042443ccc3576b4af12840b94b8