Overview

overview

10

Static

static

7

16ff2005a5...19.apk

android-9-x86

10

16ff2005a5...19.apk

android-10-x64

10

16ff2005a5...19.apk

android-11-x64

10

Analysis

  • max time kernel
    381557s
  • max time network
    86s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    26/10/2022, 23:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    16ff2005a5edf5796cadb56258fdbd1e34f7e9a850bfb6f23a5ab5b969d47f19.apk
  • Size 3.3MB
  • Sample221026-3h1fnaaaa8
  • SHA256 16ff2005a5edf5796cadb56258fdbd1e34f7e9a850bfb6f23a5ab5b969d47f19
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 3 IoCs
  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tencent.westarthk
    1⤵
    • Loads dropped Dex/Jar
    PID:4847

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        4Eefv21iYpGjEqolXnOpvRWi8k349Ebo.dex
        • Path /data/user/0/com.tencent.westarthk/app_ded/4Eefv21iYpGjEqolXnOpvRWi8k349Ebo.dex
        • Size 1.5MB
        • SHA256 f426adb0fc20f0ac992c3a0a5fc65bd20720aa5fe266da997c6623161c94f334
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        4Eefv21iYpGjEqolXnOpvRWi8k349Ebo.dex
        • Path /data/user/0/com.tencent.westarthk/app_ded/4Eefv21iYpGjEqolXnOpvRWi8k349Ebo.dex
        • Size 1.5MB
        • SHA256 f426adb0fc20f0ac992c3a0a5fc65bd20720aa5fe266da997c6623161c94f334
        • MD5 SHA1 SHA512 SSDEEP
        Download

        4Eefv21iYpGjEqolXnOpvRWi8k349Ebo.dex
        • Path /data/user/0/com.tencent.westarthk/app_ded/4Eefv21iYpGjEqolXnOpvRWi8k349Ebo.dex
        • Size 1.5MB
        • SHA256 f426adb0fc20f0ac992c3a0a5fc65bd20720aa5fe266da997c6623161c94f334
        • MD5 SHA1 SHA512 SSDEEP
        Download

        dp.kotlin-v1.lua.mph
        • Path /data/user/0/com.tencent.westarthk/cache/src617809242483296714/dp.kotlin-v1.lua.mph
        • Size 120KB
        • SHA256 0f145035801825a43c9aba19597cb6ee6737088c4f058a66d6b87f144a046062
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dp.kotlin-v1.lua.mph
        • Path /data/user/0/com.tencent.westarthk/cache/src617809242483296714/dp.kotlin-v1.lua.mph
        • Size 120KB
        • SHA256 0f145035801825a43c9aba19597cb6ee6737088c4f058a66d6b87f144a046062
        • MD5 SHA1 SHA512 SSDEEP
        Download

        dp.kotlin-v1.lua.mph
        • Path /data/user/0/com.tencent.westarthk/cache/src617809242483296714/dp.kotlin-v1.lua.mph
        • Size 120KB
        • SHA256 0f145035801825a43c9aba19597cb6ee6737088c4f058a66d6b87f144a046062
        • MD5 SHA1 SHA512 SSDEEP
        Download

        UPS.xml
        • Path /data/user/0/com.tencent.westarthk/shared_prefs/UPS.xml
        • Size 133B
        • SHA256 9d065e4f76aebd67b38f22639b5572431ebff64befc283c692eae9556c8d11c7
        • MD5 SHA1 SHA512
        Submit Download

        UPS.xml
        • Path /data/user/0/com.tencent.westarthk/shared_prefs/UPS.xml
        • Size 197B
        • SHA256 51fdf45f95187333834bf340648138a9ae2c57737f26538a970efd6ec50fa454
        • MD5 SHA1 SHA512
        Submit Download