Overview

overview

10

Static

static

7

eb446a816c...ed.apk

android_x86

10

eb446a816c...ed.apk

android_x64

10

eb446a816c...ed.apk

android_x64

10

Analysis

  • max time kernel
    1842871s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    16-06-2022 18:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35_unpacked.apk

  • Size

    4.0MB

  • MD5

    2ffac6c6ba63598b34dc8a076208f7b4

  • SHA1

    02d20c723835a961b594ada5c5acff8ee5ed9bab

  • SHA256

    2af548766f9a368e72dfab3c5bf4123da0d52f603e405e801f79a4a9c5b5c07c

  • SHA512

    fbb2955d883d9275bfa0f7c23ca1110ceed1b13083ec249f8445c9c203fdbd9554c36ab91b7c3634871812f3661a7a0b33dc4168b2ef0f1afcff26e370468bd8

Score
10/10
flubotbankerinfostealerransomwaretrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot Payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.tencent.mm
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit