Overview

overview

10

Static

static

7

476efe162f...0c.apk

android-9-x86

10

476efe162f...0c.apk

android-10-x64

10

476efe162f...0c.apk

android-11-x64

10

license-ru.html

windows7-x64

1

license-ru.html

windows10-2004-x64

1

license.html

windows7-x64

1

license.html

windows10-2004-x64

1

UserDict.pyc

windows7-x64

3

UserDict.pyc

windows10-2004-x64

3

_abcoll.pyc

windows7-x64

3

_abcoll.pyc

windows10-2004-x64

3

_sysconfigdata.pyc

windows7-x64

3

_sysconfigdata.pyc

windows10-2004-x64

3

_weakrefset.pyc

windows7-x64

3

_weakrefset.pyc

windows10-2004-x64

3

abc.pyc

windows7-x64

3

abc.pyc

windows10-2004-x64

3

copy_reg.pyc

windows7-x64

3

copy_reg.pyc

windows10-2004-x64

3

genericpath.pyc

windows7-x64

3

genericpath.pyc

windows10-2004-x64

3

linecache.pyc

windows7-x64

3

linecache.pyc

windows10-2004-x64

3

os.pyc

windows7-x64

3

os.pyc

windows10-2004-x64

3

posixpath.pyc

windows7-x64

3

posixpath.pyc

windows10-2004-x64

3

re.pyc

windows7-x64

3

re.pyc

windows10-2004-x64

3

site.pyc

windows7-x64

3

site.pyc

windows10-2004-x64

3

sre_compile.pyc

windows7-x64

3

Analysis

  • max time kernel
    3610701s
  • max time network
    169s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    08-08-2023 22:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    476efe162f8ca4f0c7ad83f3602ac1ee661f97312fd00d71d765469425dbc60c.apk

  • Size

    3.9MB

  • MD5

    601bb3c40ab4d7c3c698db4ac85a8bd9

  • SHA1

    569c652e7c06a92f6c54b1e0350775437e2ac0d6

  • SHA256

    476efe162f8ca4f0c7ad83f3602ac1ee661f97312fd00d71d765469425dbc60c

  • SHA512

    d79ae0be8150af95f36d683c44d18448653f3836748bb8f41309d888fc40342c9194b935c4106479f5a4d59ab05bdd943a6f02e6657c6f9248a7c046dc78c855

  • SSDEEP

    98304:vKZZCKUblz6StKSoJpX6Cvl7xoI1UiPPB8F19UnA/lz3/77z:vaoblz3t5oJRN7x8Sp5Alz

Score
10/10
flubotbankerinfostealertrojan

Malware Config

Signatures

  • FluBot

    FluBot is an android banking trojan that uses overlays.

    bankertrojaninfostealerflubot
  • FluBot payload 1 IoCs
  • Makes use of the framework's Accessibility service. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.moxiu.launcher
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    PID:4347

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.moxiu.launcher/mabmGjnxgk/lookxvxsosxmjcx/amhxnomn.fjfG
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.moxiu.launcher/mabmGjnxgk/lookxvxsosxmjcx/base.apk.mozhlhh1.zYn
    Filesize

    2.3MB

    MD5

    a0a9a8c4f5c08af1511d92912d58b025

    SHA1

    d3ee5ad2a3e87cc0fc8bcb9aa2aa4dc20774a512

    SHA256

    1f9f73e14dcd0ea374be1f7feab6e3c390a17e09a1c4082e5a8963d51717ba4a

    SHA512

    b30f7f64884679eb9844b640107bb5144143aad1c60f8027a9f53be14d7ee37531a082fdca326bd5236070f478b68f022a117e6bd35a98ae5517c0adb2af8a39

    Download Submit

  • /data/user/0/com.moxiu.launcher/mabmGjnxgk/lookxvxsosxmjcx/tmp-base.apk.mozhlhh4408807158913228854.zYn
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.moxiu.launcher/shared_prefs/DHL.xml
    Filesize

    133B

    MD5

    b3a1cc1fe413928ec35bb4eacf7ffa3c

    SHA1

    bdab3f7c51fdc412e8c6a813187432ac383dcda4

    SHA256

    de9348f8261c9dbc65355f0fb08439909626d19b7b4a21ac1575f3718fd59983

    SHA512

    c918f2ab6ccab27506f974234ddf0132774b70d36b3370285af56c2468a41d90ca5967481d7132ca6bec15415ca1171aa2bc7cf34b814864ae04bc3e87d36ebd

    Download Submit

  • /data/user/0/com.moxiu.launcher/shared_prefs/multidex.version.xml
    Filesize

    307B

    MD5

    e6e8733860137cad39db090a0c41afde

    SHA1

    107bd68e84cfc0370111e3a57f067d35ae1ccb4c

    SHA256

    d1d09ff3ed6eed60b9fda43317b82dc45deb5ee0b1f3954a3038e83026dd0f50

    SHA512

    39ff4e937e11aa561764eba123431c54d5e85fd0b2fb68a696384c60ececc39fea248673c71d7f086dd27ce4bd828531e8ad72ffae397a08a696886fa59c839f

    Download Submit