Analysis
-
max time kernel
1820835s -
max time network
165s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
-
submitted
06-09-2023 22:01
General
-
Target
6f740ba69a5020a316d67e0341179ad03f9820fdde6501591255e9e98b06c0ae.apk
-
Size
4.1MB
-
MD5
c7eedb71b543a24908b74b5f9e3894d4
-
SHA1
c080c3595c9337eb15a122e0fdd9776ee38cb347
-
SHA256
6f740ba69a5020a316d67e0341179ad03f9820fdde6501591255e9e98b06c0ae
-
SHA512
0c11b479fcf5914658796575674f867699a39d7b092862e5b460f7b239c005fb09954377bfbf7952a0f13f9112940193f31bf2241000d782cc5bcfc504fb93c1
-
SSDEEP
98304:ixsR3c4OlEK4Sg7FJDEM2pHGRzUEWoMd0e4:iyJjKlpHPoMdP4
Malware Config
Signatures
-
FluBot
FluBot is an android banking trojan that uses overlays.
-
FluBot payload 1 IoCs
-
Makes use of the framework's Accessibility service. 1 IoCs
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.baidu.searchbox1⤵
- Makes use of the framework's Accessibility service.
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
859KB
MD5a21eb4bfd58a977d1719df1ddecbcc24
SHA175c2cf2e965970f46f5affb84927a10b011f7c33
SHA2561bd6c045f1eb5ad681cbbbf929c40820fdeacc4be73624ddc0a929d64304ea9e
SHA5128ae636a200b08adee4681575a53c6715055d269e2d95aeaca3d99075cccc14b1f4fcd8e09b3f6b470e18cefc9d606ee1e539e4439309ac2d208b4218c0654dc1
-
Filesize
2.3MB
MD5c9bb380d82552712b0b690d8888c4ee6
SHA1e541cfefb00e67ee94bebc3344acf3b8e1dc40b6
SHA256227f7f46e0c88513b8b6271107393206416aa965b36a86ad163aae5cd752861c
SHA5128fc922bbf5c7e1ee8b4fa00b770229a2631a30e45ee7092ea2f1c6e210468605849373d0a5de9df072116e58136d75829202faf58d0b58c7ae57a386c58337d4