Overview

overview

10

Static

static

7

1dc84f5f1e...ea.apk

android_x86

10

1dc84f5f1e...ea.apk

android_x64

10

1dc84f5f1e...ea.apk

android_x64

1

Analysis

  • max time kernel
    1842820s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16-06-2022 18:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1dc84f5f1ee6daf33f5da0d0d82f252c64274a771c6214170eae441d18447fea.apk

  • Size

    4.8MB

  • MD5

    d086e98cc813dc57c3b2b9a299ae2928

  • SHA1

    94078ef7ca8fbecd5194f082902ca991650e29e7

  • SHA256

    1dc84f5f1ee6daf33f5da0d0d82f252c64274a771c6214170eae441d18447fea

  • SHA512

    dfccb95a17e570225938bfa82d6a9d8c1f22e172e45c8a357b3a05d64ba670d372d69d38e92d9250191f10db454a2246d2ab5877fb759ee0bd2bd33b199a16cc

Score
10/10
flubotbankerinfostealerransomwaretrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.baidu.searchbox
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6195

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.baidu.searchbox/U78jGk8gGI/jgdigj9jwkh786g/base.apk.IGtktGg1.Ide
    Filesize

    2.0MB

    MD5

    276dda73a33e26b92a856aee64bab6f6

    SHA1

    39594ad2317acae957af97aa710ef870e6bc7ee7

    SHA256

    09d188a7bc9be9d161c96fe13890c94a451645067a6d34fb0fca6d6e0390eaa2

    SHA512

    d80937e9acc83d5b56e8fc377b36f96b8c56af1da08b6fde7a1fa25430df5e395d363bcc64eeb418ee3d9ceacfb085a5063cced4f2192b66bb9ac670f80926d0

    Download Submit