Overview

overview

10

Static

static

7

Malware.unknown.apk

android-10-x64

10

license-ru.html

android-10-x64

license.html

android-10-x64

UserDict.pyc

android-10-x64

_abcoll.pyc

android-10-x64

_sysconfigdata.pyc

android-10-x64

_weakrefset.pyc

android-10-x64

abc.pyc

android-10-x64

copy_reg.pyc

android-10-x64

genericpath.pyc

android-10-x64

linecache.pyc

android-10-x64

os.pyc

android-10-x64

posixpath.pyc

android-10-x64

re.pyc

android-10-x64

site.pyc

android-10-x64

sre_compile.pyc

android-10-x64

sre_constants.pyc

android-10-x64

sre_parse.pyc

android-10-x64

stat.pyc

android-10-x64

sysconfig.pyc

android-10-x64

traceback.pyc

android-10-x64

types.pyc

android-10-x64

warnings.pyc

android-10-x64

render_h5_bridge.js

android-10-x64

shop_snaps...e.html

android-10-x64

workerjs_m...ker.js

android-10-x64

workerjs_v8.js

android-10-x64

Analysis

  • max time kernel
    1796803s
  • max time network
    68s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    18-07-2023 22:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Malware.unknown.apk

  • Size

    3.0MB

  • MD5

    75c0eb2c78ff31534a588ec47088b622

  • SHA1

    abc703f6e5b824d0a1c14108228009001509a162

  • SHA256

    0de7ded6e4db0cb540ef7249c4bb96ca3147aa193801b06c5235781271bc4b23

  • SHA512

    d0b74f972f851fc7a1f715e152e6f439a080b4d7b1f3129cec6c3164d8b1f75c34a920c393d5d05be45185a2b926b6c382b5e83387436b7905b2500e3db4c36b

  • SSDEEP

    49152:Y09ypryDHH0D6gmPOroTV8asMbUCNhSBNwj0ciNcJ3W7HxTQqUonX73lwp:YXrWn0DAOroTV87w4kjD09RzUsyp

Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.xunmeng.pinduoduo
    1⤵
    • Loads dropped Dex/Jar
    PID:4868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xunmeng.pinduoduo/app_apkprotector_dex/xCSswjlO.king
    Filesize

    2.4MB

    MD5

    5b49441a9350dd3b4dba093b8faa2c8e

    SHA1

    bbe36075bd706b87eb7f96fc498c83088b717226

    SHA256

    c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d

    SHA512

    e4ce7f58ed24644094dee157d4e364c9bd4d68507bac760c760695dc2280052914bfeeb2c020f53b4e9e5da75e173bba28fd994176a4cea66d79a0e648279f94

    Download Submit

  • /data/user/0/com.xunmeng.pinduoduo/app_apkprotector_dex/xCSswjlO.king
    Filesize

    2.4MB

    MD5

    5b49441a9350dd3b4dba093b8faa2c8e

    SHA1

    bbe36075bd706b87eb7f96fc498c83088b717226

    SHA256

    c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d

    SHA512

    e4ce7f58ed24644094dee157d4e364c9bd4d68507bac760c760695dc2280052914bfeeb2c020f53b4e9e5da75e173bba28fd994176a4cea66d79a0e648279f94

    Download Submit

  • /data/user/0/com.xunmeng.pinduoduo/app_apkprotector_dex/xCSswjlO.king
    Filesize

    2.4MB

    MD5

    5b49441a9350dd3b4dba093b8faa2c8e

    SHA1

    bbe36075bd706b87eb7f96fc498c83088b717226

    SHA256

    c23491993bd680fa89ca42a5ff0695365e07c83874e4db29b96234d8a21fe10d

    SHA512

    e4ce7f58ed24644094dee157d4e364c9bd4d68507bac760c760695dc2280052914bfeeb2c020f53b4e9e5da75e173bba28fd994176a4cea66d79a0e648279f94

    Download Submit

  • /data/user/0/com.xunmeng.pinduoduo/shared_prefs/Voicemail.xml
    Filesize

    133B

    MD5

    b01fd985b97e5e996c8c8cfcd0fb3d86

    SHA1

    7b3020a137472066448bdfbeef41820c5d2469dd

    SHA256

    b6b4b3fa64017a06db0bd39f7e8b31e3c4fa4b51128af537132b393201de5b00

    SHA512

    e96f2b1e1edea57e5b469b4d1fbab4fe3c044af36d32d6589f743396f5da8e3bde4bdee842a1978c9ad53752b1030dfa0b44e5fd8d87442392857941ea7f2ee7

    Download Submit

  • /data/user/0/com.xunmeng.pinduoduo/shared_prefs/Voicemail.xml
    Filesize

    197B

    MD5

    4eeff05c946b882309409011252a1876

    SHA1

    92a88f14fcc8b0075266cd1b312506fbb83bc547

    SHA256

    aebb73c7ed606493522c6d2886d93c4e705aebca7fc50b0ddc584165c98655c4

    SHA512

    3ccd5986a109639fc72819006b5c7ec6e7affbc982ceb9db9b73f1a0bfdd75277bd0698d56a21b0635917e3ff4f773c7c91f04514d7ea3400251f09211a21374

    Download Submit