Analysis
-
max time kernel
784356s -
max time network
167s -
platform
android_x64 -
resource
android-x64-20230824-en -
resource tags
-
submitted
25-08-2023 22:03
General
-
Target
63b0a15d6e92441701d15f76576a8f93065d1ed8f40672dce8dfde7fc788ab12.apk
-
Size
4.1MB
-
MD5
f2b9f29261778b009388db3ac0eb654a
-
SHA1
8323e7b6b63da0c470e674c9b623f57e7397c57b
-
SHA256
63b0a15d6e92441701d15f76576a8f93065d1ed8f40672dce8dfde7fc788ab12
-
SHA512
3681edf2ae761b68fcdb0c2ade75ed3741aeaff69354fc7c6c8c2339bec787b3ae902e26e7f936d871bba0776bc2d92fb03122f37fbfcd68802cce42f0647bee
-
SSDEEP
98304:l3D9RaM6IxWhywEvl89pRZs7pQDCSGUDOa5SBr7mk5Lo/:lZRkSbwqIi2D/tOa5dk5w
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot payload 1 IoCs
-
Makes use of the framework's Accessibility service. 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.moxiu.launcher1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
859KB
MD583ccf953c9df564aec421d52fd6aa36e
SHA150d424f4248849edf1a2c218b50dbf8aff9ebc84
SHA2565e61af10f5a0e189a62ec3f48d4e1cebc14596d6e785a08bee620dfb5071a84b
SHA512cf93356abecf715cf31408f3e20243045713a5ec1b9cb0604a781e9cf82f0945c680d4622bf3cfaffbffbefdb3856f341e4d48b5c2f1dcf8ac98728e5b79d2dc
-
Filesize
2.3MB
MD5f578217c5685e175859b17f99d3167f1
SHA1e303b11029c4b1e215d59daa25c28044d8f0a593
SHA2569ba6e0cc9fb9af3c0487321b309794f178d9870d52736ee0f366ef73148c198d
SHA512f2640e3eb5e865aa2f60771510e37610ce1d3b0dfb8f77903422163553706b3a1a98e8f18ea9405267ed5e1fb308c38fc32d127854bc867e7bb630bc71aae995