Overview

overview

10

Static

static

7

eb446a816c...ed.apk

android-9-x86

10

eb446a816c...ed.apk

android-10-x64

10

eb446a816c...ed.apk

android-11-x64

10

Resubmissions

27-10-2022 00:09

221027-afm4bsaber 10

26-10-2022 23:41

221026-3px9waaacl 10

Analysis

  • max time kernel
    382150s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    27-10-2022 00:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35_unpacked.apk

  • Size

    4.0MB

  • MD5

    2ffac6c6ba63598b34dc8a076208f7b4

  • SHA1

    02d20c723835a961b594ada5c5acff8ee5ed9bab

  • SHA256

    2af548766f9a368e72dfab3c5bf4123da0d52f603e405e801f79a4a9c5b5c07c

  • SHA512

    fbb2955d883d9275bfa0f7c23ca1110ceed1b13083ec249f8445c9c203fdbd9554c36ab91b7c3634871812f3661a7a0b33dc4168b2ef0f1afcff26e370468bd8

  • SSDEEP

    98304:+1iNL19D17KA443+dt+G9ZDPAC77jZRFJhYv09Lc:7NLLZ7l4F2+97j7FJ/Lc

Score
10/10
flubotbankerinfostealerransomwaretrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.tencent.mm
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/app_apkprotector_dex/classes-v1.bin
    Filesize

    3.1MB

    MD5

    aca8ab11deeeed62a960d35ffa984401

    SHA1

    a20fc21166d30e80f0f8cfcd3ce7c7a11b579960

    SHA256

    45b81ea4e359f1a2ccd0a4d537dbbc9fa5839a5c1a81ea26febd3abba5df67cf

    SHA512

    c0637ee40a12db71c5edfbc51bdb2b5cbb562068047a36cb9e3af9e45087c6b8355ea95c5ffeec6b45fb6cf71dd6a3fd2d5fc046b4b340652adbfb3c2e574cb8

    Download Submit

  • /data/user/0/com.tencent.mm/shared_prefs/FedEx.xml
    Filesize

    133B

    MD5

    294f2c3f897c8a7ec04436f05dd51c80

    SHA1

    6defcd3ec6e206046dd9fee0b1df9b0b01332646

    SHA256

    77cbeffd30f0572f0f7b79e4352148fe4a1404e028f98ee45d224a5da36bcf6f

    SHA512

    aa23da82fb96f23d81763fb4433239285cf127224f6bbd1d358ed059ab0faca8e6f49b5e54119e75418e437649ed3827850fb87b773099433400bd8ee5ddac64

    Download Submit

  • /data/user/0/com.tencent.mm/shared_prefs/FedEx.xml
    Filesize

    197B

    MD5

    7f6219e8070c9f6062a5f2a8a7f25278

    SHA1

    95ef5c984fffba2a455f1641b2995ad78245e112

    SHA256

    2c747b877314aea59d51945fbf73c78f4e8c6998129d5828fc0cc4d5d9be2d4a

    SHA512

    bdb6153589a99d590a035ef8e55550608efe87db3549f09ff6d286341176bdced9d9d47b10f07e801382df19f29122907a3efeb6aebb90a669022b47ee762f06

    Download Submit