General
- Target 28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522fa
- Size 4.9MB
- Sample220616-xgdydabbf5
- SHA256 28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f
Score
10/10
Malware Config
Targets
-
- Target 28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522fa
- Size 4.9MB
- SHA256 28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f
Score10/10FluBot
FluBot is an android banking trojan that uses overlays.
FluBot Payload
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
Makes use of the framework's Accessibility service.
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
Uses Crypto APIs (Might try to encrypt user data).