Analysis
-
max time kernel
1843337s -
max time network
155s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
16-06-2022 18:53
General
-
Target
d62843e7064553f995bb97b3e064922ebc93ac6591112f9b58b11b51c5ca8b30.apk
-
Size
2.6MB
-
MD5
7aa3538e663b6f580f821a9b345ec187
-
SHA1
37470bd54c24ec5b42ee982bcd8df2f6255f3fa9
-
SHA256
d62843e7064553f995bb97b3e064922ebc93ac6591112f9b58b11b51c5ca8b30
-
SHA512
f9b7c1ade63343d92e93781fbb728fa354c58b210095da3f01a681cd6e3a038a84ae14e303e505c67a4944ebdac1497836671cbfba3ae0e6709c2a4abb0444eb
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot Payload 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.tencent.qqmusic1⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
MD52f84073f750cce3b9c61df0a3a769ceb
SHA1b237b7305d30c408205b92188d3ecaa957301140
SHA2564e4249a1ebd84edcce0c22ace40dead606579eb44f23b0bbf4c45c93c01cc4cf
SHA51232f3d750c68c4e85f9e81f82c1a6232d66129843d437035cdf4eeafe5d90fcfd51f035d092e6bc266986b21eac083bf077dea4c2a69b0f495d77d199eef6348c
-
Filesize
307B
MD5f35211589eb8996ac06736e44d95a27a
SHA15e7495d975cf1cde771f7bae360b6742993de375
SHA2566313119bee7daac40c85b14e3852b4ee2cb522ca7f533e4f928a802d8cb76757
SHA51297b8d37b80564acfdef3a4a69cafc316139591429f72ef5644258edf81b56ee2df1a84fbb8f0166a33cebf042e1484a3216428b804864b88bc3a25debe784368