General

  • Target

    fluhorse-jan2024.apk

  • Size

    19.1MB

  • Sample

    240604-pjp5esgc94

  • MD5

    ba65f1bc258a239627a6881ffff88ead

  • SHA1

    3e0eeac4562ab021271a740d4388c43712b39f1c

  • SHA256

    db68dc64c340952e9405215bde90897846bb9ea7a06242e7713008fb5688bab5

  • SHA512

    9fca8c7e641f680c6b2043d9549a6ccf269ac9a18cbffeea1b6865a71515c78840ebb4013f30f3972e92a0c2f682343d10b628631ba51529aa679dcb6e43b3a8

  • SSDEEP

    393216:TDWCjfU5OHdc5sltsakB22yjJiVouEMHOwEzjx8zDdhj01d:fWcU5OHTljCb+Y6MuwEzV0Z01d

Malware Config

Targets

    • Target

      fluhorse-jan2024.apk

    • Size

      19.1MB

    • MD5

      ba65f1bc258a239627a6881ffff88ead

    • SHA1

      3e0eeac4562ab021271a740d4388c43712b39f1c

    • SHA256

      db68dc64c340952e9405215bde90897846bb9ea7a06242e7713008fb5688bab5

    • SHA512

      9fca8c7e641f680c6b2043d9549a6ccf269ac9a18cbffeea1b6865a71515c78840ebb4013f30f3972e92a0c2f682343d10b628631ba51529aa679dcb6e43b3a8

    • SSDEEP

      393216:TDWCjfU5OHdc5sltsakB22yjJiVouEMHOwEzjx8zDdhj01d:fWcU5OHTljCb+Y6MuwEzV0Z01d

    • FluHorse

      FluHorse is an Android malware targeting East Asia users first seen in May 2023.

    • FluHorse payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks