Resubmissions

03-07-2024 09:43

240703-lp1xbs1bln 10

03-07-2024 09:37

240703-llqxys1akq 10

03-07-2024 09:34

240703-ljz3vawgja 10

15-06-2021 18:35

210615-nab8r25hp6 10

15-06-2021 15:20

210615-a9th5lxqa2 10

General

  • Target

    ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

  • Size

    3.8MB

  • Sample

    240703-llqxys1akq

  • MD5

    10f8ddd80b1eb94540b5aace12b8824a

  • SHA1

    5f6d13b57112441cd92a9cd2f9d115d9e492f158

  • SHA256

    ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

  • SHA512

    66ed579fa60280488142c6fce852bb8751b7cab2f7e323ba05c62bc925b24e4da2cf8733a2ab5c63bbd5ef128108d23398d33d052fd574fc40ed368c75ffb5a0

  • SSDEEP

    98304:YKV0yzGONs7GxuC/8Gnwspn5z2HI6SBJ8B1lqOM1tUeVyNIo87Z:YrOS6EC/8Gwsl5SHI7Y1lqXO4o87Z

Malware Config

Targets

    • Target

      ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

    • Size

      3.8MB

    • MD5

      10f8ddd80b1eb94540b5aace12b8824a

    • SHA1

      5f6d13b57112441cd92a9cd2f9d115d9e492f158

    • SHA256

      ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924

    • SHA512

      66ed579fa60280488142c6fce852bb8751b7cab2f7e323ba05c62bc925b24e4da2cf8733a2ab5c63bbd5ef128108d23398d33d052fd574fc40ed368c75ffb5a0

    • SSDEEP

      98304:YKV0yzGONs7GxuC/8Gnwspn5z2HI6SBJ8B1lqOM1tUeVyNIo87Z:YrOS6EC/8Gwsl5SHI7Y1lqXO4o87Z

    • FluBot

      FluBot is an android banking trojan that uses overlays.

    • FluBot payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks