Overview

overview

10

Static

static

7

bbe7f3bc15...14.apk

android-9-x86

10

bbe7f3bc15...14.apk

android-10-x64

10

bbe7f3bc15...14.apk

android-11-x64

10

appboy-htm...ent.js

windows7-x64

1

appboy-htm...ent.js

windows10-2004-x64

1

shape_1.xml

windows7-x64

1

shape_1.xml

windows10-2004-x64

3

shape_10.xml

windows7-x64

1

shape_10.xml

windows10-2004-x64

3

shape_11.xml

windows7-x64

1

shape_11.xml

windows10-2004-x64

3

shape_12.xml

windows7-x64

1

shape_12.xml

windows10-2004-x64

3

shape_13.xml

windows7-x64

1

shape_13.xml

windows10-2004-x64

3

shape_14.xml

windows7-x64

1

shape_14.xml

windows10-2004-x64

3

shape_15.xml

windows7-x64

1

shape_15.xml

windows10-2004-x64

1

shape_16.xml

windows7-x64

1

shape_16.xml

windows10-2004-x64

3

shape_17.xml

windows7-x64

1

shape_17.xml

windows10-2004-x64

3

shape_18.xml

windows7-x64

1

shape_18.xml

windows10-2004-x64

3

shape_19.xml

windows7-x64

1

shape_19.xml

windows10-2004-x64

3

shape_2.xml

windows7-x64

1

shape_2.xml

windows10-2004-x64

3

shape_20.xml

windows7-x64

1

shape_20.xml

windows10-2004-x64

3

shape_21.xml

windows7-x64

1

Analysis

  • max time kernel
    2907653s
  • max time network
    115s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    31-07-2023 18:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bbe7f3bc15429196cc01935295ff6a7867b2fc501d1896b01afe62fbce2ed314.apk

  • Size

    3.6MB

  • MD5

    5b38cb30eb591eeefd6893b0ec04d44b

  • SHA1

    668c2bb8cb3d3aa9520c90b85cfb33becb2b3aea

  • SHA256

    bbe7f3bc15429196cc01935295ff6a7867b2fc501d1896b01afe62fbce2ed314

  • SHA512

    03602474872b49d22370db4eace3374c7f5a726ac128400ab1ec1df89af40a48d33427d9bf6b3bafbea5f1724b1b4f008c2010ac1a8b6c88a99f0c8b1678a4ca

  • SSDEEP

    98304:9UrPJfylp4QhegEGmJHgi3nheMSQXl7rXdLdO5e3W3Y:9dlSQhegAXHDZOs3J

Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.qq.reader
    1⤵
    • Loads dropped Dex/Jar
    PID:4829

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.qq.reader/bg9vI94ofk/h4sheln9ohdoo98/base.apk.vgkdhfl1.hfv
    Filesize

    2.2MB

    MD5

    c7ea97ddf2d3b3760db476d88785a44e

    SHA1

    dcaa3795d2c2efbb1fedd8ef1ac83ab818dd1a10

    SHA256

    1f30dcdb244fadc68d100f87833db42fb4191fbbd7a08627ed8cb95beeae223c

    SHA512

    d7f227b86dd117f607bab5937a6ef29a69ee1cae3c7ee5a4b9ea4d44533bba8ec36fb0a5d12acafc1bfcf6df04edd69e31a4259077a4cff47aa2096493fc494f

    Download Submit

  • /data/user/0/com.qq.reader/bg9vI94ofk/h4sheln9ohdoo98/ljizgvdm.gh5f
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.qq.reader/bg9vI94ofk/h4sheln9ohdoo98/tmp-base.apk.vgkdhfl862189795897668509.hfv
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.qq.reader/shared_prefs/DHL.xml
    Filesize

    133B

    MD5

    1612b1ada26c3ea5128ac0b1b3216ac8

    SHA1

    f9b94b94a62299c7b3d4725b4fa9626dd31baf7b

    SHA256

    e3d94f144ff9133ede0c33c917d814d17968ab49441307c9005fe9b8b86782a4

    SHA512

    25bbeafd9f8d24c95d813aeabe623b272db4d36413bc29ad4477c7d1903df10a919609d2053ceb87d1b43e323dc94a08893b970dbb98cbb756bdcf10e39fd42e

    Download Submit

  • /data/user/0/com.qq.reader/shared_prefs/multidex.version.xml
    Filesize

    307B

    MD5

    8928c1c076a7821bd3104e6cf41a16e1

    SHA1

    0b7f0469f77550072ebc81f96fbe6c4e4d9c8d9c

    SHA256

    7b6f5fbc6c7c741a3adb6f7282b18c866ed3e1fd318c6d2d33a84ef600c0c308

    SHA512

    6e3dc64cc692cc4bededf77b21c6ab9130b8eaf9b5d65f31bc8ed54a1517a3580965afa6026e898219514d4c6b63ea4838a7c19a1009a1e2dadcfb44f949adab

    Download Submit