Overview

overview

10

Static

static

7

f1bcf62ae8...98.apk

android-9-x86

10

f1bcf62ae8...98.apk

android-10-x64

10

f1bcf62ae8...98.apk

android-11-x64

10

appboy-htm...ent.js

windows7-x64

1

appboy-htm...ent.js

windows10-2004-x64

1

shape_1.xml

windows7-x64

1

shape_1.xml

windows10-2004-x64

3

shape_10.xml

windows7-x64

1

shape_10.xml

windows10-2004-x64

3

shape_11.xml

windows7-x64

1

shape_11.xml

windows10-2004-x64

3

shape_12.xml

windows7-x64

1

shape_12.xml

windows10-2004-x64

3

shape_13.xml

windows7-x64

1

shape_13.xml

windows10-2004-x64

3

shape_14.xml

windows7-x64

1

shape_14.xml

windows10-2004-x64

3

shape_15.xml

windows7-x64

1

shape_15.xml

windows10-2004-x64

3

shape_16.xml

windows7-x64

1

shape_16.xml

windows10-2004-x64

3

shape_17.xml

windows7-x64

1

shape_17.xml

windows10-2004-x64

3

shape_18.xml

windows7-x64

1

shape_18.xml

windows10-2004-x64

3

shape_19.xml

windows7-x64

1

shape_19.xml

windows10-2004-x64

3

shape_2.xml

windows7-x64

1

shape_2.xml

windows10-2004-x64

3

shape_20.xml

windows7-x64

1

shape_20.xml

windows10-2004-x64

3

shape_21.xml

windows7-x64

1

Analysis

  • max time kernel
    3518874s
  • max time network
    52s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    07-08-2023 20:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f1bcf62ae8af19e38cfa19809e5a65cddd9b638cce72598f053774dda76bf398.apk

  • Size

    3.8MB

  • MD5

    930b9130e8a74dfc0b36be26fa051991

  • SHA1

    a49e598dcb275b3a4180feaa5a89a6e1941864ee

  • SHA256

    f1bcf62ae8af19e38cfa19809e5a65cddd9b638cce72598f053774dda76bf398

  • SHA512

    87908ee5c7288bf426aa7b38aa5cd9b20bc2dc7027d9e945e125aa45de55fa9e833ca25ea9f6d81fa36e0ccd603f63b51728a816de93d21caeca0c4a1f945026

  • SSDEEP

    98304:p//rDg40SwA5x2eC/Z+6br/rXwhyPQSEYjefkYZ5Vk3W3Uhjy:p/jU43h5x2e60gPlEYjZD3Pm

Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.qiyi.video
    1⤵
    • Loads dropped Dex/Jar
    PID:4826

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.qiyi.video/hkuGnjd84n/fhrz8bjeJd4jusw/base.apk.Ghjoj4v1.vvh
    Filesize

    2.2MB

    MD5

    0b4d3de8f586f0925eda275d5ebf3727

    SHA1

    ab2d6234d53020d2bd4238e4ab525168ade3618f

    SHA256

    8f3f7b5a292efc43392d516eeabd8a24fb45cfe1b835ed25184deffe0b6d0a16

    SHA512

    d97869e7b32a1e19c09f96ea82e2426649e793e6d970c3feec7b366541b03ac797ab5a94e9abc5565d4c2cbedc6fe09025f6d5170a15592914df2f063e13424d

    Download Submit

  • /data/user/0/com.qiyi.video/hkuGnjd84n/fhrz8bjeJd4jusw/tmp-base.apk.Ghjoj4v7979285322279199071.vvh
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.qiyi.video/hkuGnjd84n/fhrz8bjeJd4jusw/whhomuof.hIbw
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.qiyi.video/shared_prefs/DHL.xml
    Filesize

    133B

    MD5

    fdb733b8c40fc3e7f7eb611ed88443f6

    SHA1

    4a02d0f03b1ae6ad0eacaf162e0f600a641bbe93

    SHA256

    3b31ff538630295eff15fa76d39ee0138a4a980348f5328fc21fbd1fb03065f3

    SHA512

    c807f95b8a93df07bfcb7a8f825ff52d75a857655c45ff1b6fc877507dc1dd3a922a7e1708c779d1c1cc3a3b27d89281391573e0512e10cd9e385a9a02762824

    Download Submit

  • /data/user/0/com.qiyi.video/shared_prefs/multidex.version.xml
    Filesize

    306B

    MD5

    834e101169a0ae92a1370a0eafcb2eda

    SHA1

    8f382b6804261d37231ea855b1a4454871e15c70

    SHA256

    4b1c62700218152ef2d0691128a897a31f1ae31b95e5aa43fd285a576112f58c

    SHA512

    e320c0fcb0a8bd53aa7ab8a4d70bf0aadf60b7c2c3fea5b9ce26261a4daf3aede1533a4fc8aee75a3c109dd6213d12758706517ea5bb7cc1e582a3ac018f7f63

    Download Submit