Overview

overview

10

Static

static

7

Malware.unknown.apk

android-9-x86

10

Malware.unknown.apk

android-10-x64

10

Malware.unknown.apk

android-11-x64

10

Resubmissions

07/02/2023, 12:04

230207-n8lymaef8v10

07/02/2023, 12:03

230207-n71emaef7110

Analysis

  • max time kernel
    734327s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    07/02/2023, 12:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Malware.unknown.apk
  • Size 3.0MB
  • Sample230207-n71emaef71
  • SHA256 0de7ded6e4db0cb540ef7249c4bb96ca3147aa193801b06c5235781271bc4b23
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.xunmeng.pinduoduo
    1⤵
    • Loads dropped Dex/Jar
    PID:4701

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        xCSswjlO.king
        • Path /data/user/0/com.xunmeng.pinduoduo/app_apkprotector_dex/xCSswjlO.king
        • Size 2.4MB
        • SHA256 c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xCSswjlO.king
        • Path /data/user/0/com.xunmeng.pinduoduo/app_apkprotector_dex/xCSswjlO.king
        • Size 2.4MB
        • SHA256 c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d
        • MD5 SHA1 SHA512 SSDEEP
        Download

        xCSswjlO.king
        • Path /data/user/0/com.xunmeng.pinduoduo/app_apkprotector_dex/xCSswjlO.king
        • Size 2.4MB
        • SHA256 c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d
        • MD5 SHA1 SHA512 SSDEEP
        Download

        Voicemail.xml
        • Path /data/user/0/com.xunmeng.pinduoduo/shared_prefs/Voicemail.xml
        • Size 133B
        • SHA256 a6371e4e34dbae780fe5d458904fa5a7c8a52f5676f82c85dd4d70bce4fa7905
        • MD5 SHA1 SHA512
        Submit Download

        Voicemail.xml
        • Path /data/user/0/com.xunmeng.pinduoduo/shared_prefs/Voicemail.xml
        • Size 197B
        • SHA256 4cdb24dab94f02734dd1dd72cb6bd16ff4c8bb39a6d50fc9ed84074ad0042e72
        • MD5 SHA1 SHA512
        Submit Download