Overview

overview

10

Static

static

7

476efe162f...0c.apk

android-9-x86

10

476efe162f...0c.apk

android-10-x64

10

476efe162f...0c.apk

android-11-x64

10

license-ru.html

windows7-x64

1

license-ru.html

windows10-2004-x64

1

license.html

windows7-x64

1

license.html

windows10-2004-x64

1

UserDict.pyc

windows7-x64

3

UserDict.pyc

windows10-2004-x64

3

_abcoll.pyc

windows7-x64

3

_abcoll.pyc

windows10-2004-x64

3

_sysconfigdata.pyc

windows7-x64

3

_sysconfigdata.pyc

windows10-2004-x64

3

_weakrefset.pyc

windows7-x64

3

_weakrefset.pyc

windows10-2004-x64

3

abc.pyc

windows7-x64

3

abc.pyc

windows10-2004-x64

3

copy_reg.pyc

windows7-x64

3

copy_reg.pyc

windows10-2004-x64

3

genericpath.pyc

windows7-x64

3

genericpath.pyc

windows10-2004-x64

3

linecache.pyc

windows7-x64

3

linecache.pyc

windows10-2004-x64

3

os.pyc

windows7-x64

3

os.pyc

windows10-2004-x64

3

posixpath.pyc

windows7-x64

3

posixpath.pyc

windows10-2004-x64

3

re.pyc

windows7-x64

3

re.pyc

windows10-2004-x64

3

site.pyc

windows7-x64

3

site.pyc

windows10-2004-x64

3

sre_compile.pyc

windows7-x64

3

Analysis

  • max time kernel
    3610575s
  • max time network
    43s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    08-08-2023 22:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    476efe162f8ca4f0c7ad83f3602ac1ee661f97312fd00d71d765469425dbc60c.apk

  • Size

    3.9MB

  • MD5

    601bb3c40ab4d7c3c698db4ac85a8bd9

  • SHA1

    569c652e7c06a92f6c54b1e0350775437e2ac0d6

  • SHA256

    476efe162f8ca4f0c7ad83f3602ac1ee661f97312fd00d71d765469425dbc60c

  • SHA512

    d79ae0be8150af95f36d683c44d18448653f3836748bb8f41309d888fc40342c9194b935c4106479f5a4d59ab05bdd943a6f02e6657c6f9248a7c046dc78c855

  • SSDEEP

    98304:vKZZCKUblz6StKSoJpX6Cvl7xoI1UiPPB8F19UnA/lz3/77z:vaoblz3t5oJRN7x8Sp5Alz

Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.moxiu.launcher
    1⤵
    • Loads dropped Dex/Jar
    PID:4876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.moxiu.launcher/mabmGjnxgk/lookxvxsosxmjcx/amhxnomn.fjfG
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.moxiu.launcher/mabmGjnxgk/lookxvxsosxmjcx/base.apk.mozhlhh1.zYn
    Filesize

    2.3MB

    MD5

    a0a9a8c4f5c08af1511d92912d58b025

    SHA1

    d3ee5ad2a3e87cc0fc8bcb9aa2aa4dc20774a512

    SHA256

    1f9f73e14dcd0ea374be1f7feab6e3c390a17e09a1c4082e5a8963d51717ba4a

    SHA512

    b30f7f64884679eb9844b640107bb5144143aad1c60f8027a9f53be14d7ee37531a082fdca326bd5236070f478b68f022a117e6bd35a98ae5517c0adb2af8a39

    Download Submit

  • /data/user/0/com.moxiu.launcher/mabmGjnxgk/lookxvxsosxmjcx/tmp-base.apk.mozhlhh8445825435389014202.zYn
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.moxiu.launcher/shared_prefs/DHL.xml
    Filesize

    133B

    MD5

    31e01a7531d5d68b5eb11aa87cddcf50

    SHA1

    552c8bdd0c029d9730ff1c1511403c9f5b2b3353

    SHA256

    84ef363a2c45c2e58250b3f3db1938ac670dc8c5b1afae3d9c4b20e1ade45bc7

    SHA512

    5e4af1be4ece7f4202f9636d7eb6e7ac2cff196c74bb1d1f591d320d9e88b562686c6a562c214763c27572bae21b69ee2b68068f7f356cddaaf48918a948549f

    Download Submit

  • /data/user/0/com.moxiu.launcher/shared_prefs/multidex.version.xml
    Filesize

    307B

    MD5

    732e60386ed52eeb42364c346c5ca1e6

    SHA1

    add5c602272e10116cdc0fd72faa621f7904d217

    SHA256

    e8b251ee277df4bb67203554fc4c8e8063009c8ba3d0f8a5e162266b424502e5

    SHA512

    2961bc75224300d317290168fac2ee073c0c0e0e7d17797793bbc6c881c526d5026d2130e6debfd0d13ea8845a868d300a1c202140e7eccec522cbc600c4f156

    Download Submit