General
- Target 4da397dcda35bd469b3af3c0f49ef7a2a4e19e3338f2b557560384d174b197fa.apk
- Size 6.7MB
- Sample220616-xcvqbsbbd8
- SHA256 4da397dcda35bd469b3af3c0f49ef7a2a4e19e3338f2b557560384d174b197fa
Score
10/10
Malware Config
Targets
-
- Target 4da397dcda35bd469b3af3c0f49ef7a2a4e19e3338f2b557560384d174b197fa.apk
- Size 6.7MB
- SHA256 4da397dcda35bd469b3af3c0f49ef7a2a4e19e3338f2b557560384d174b197fa
Score10/10-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload
-
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
-
Makes use of the framework's Accessibility service.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data).