General

  • Target
    14e0a850b69926f349f0417d24327e6d1078e6e0f49c5575d20935d6306c724a
  • Size 1.3MB
  • Sample260911-gactqszcjb
  • SHA256 14e0a850b69926f349f0417d24327e6d1078e6e0f49c5575d20935d6306c724a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • fvncbot

C2
  • https://naleymilva.it.com

Signatures

  • Family: FvncBot

    FvncBot is an Android banking trojan first seen in December 2025.

  • FvncBot payload 1 IoCs

File Explorer

  • 14e0a850b69926f349f0417d24327e6d1078e6e0f49c5575d20935d6306c724a
    .zip 1.3MB
  • e8213ae721dede7cd222669fd0d17af514b25c6dc71234e56ecb93289c9bd9e0
    .zip 1.3MB
  • classes.dex
    .dex 2.9MB

14e0a850b69926f349f0417d24327e6d1078e6e0f49c5575d20935d6306c724a

  • SHA256 14e0a850b69926f349f0417d24327e6d1078e6e0f49c5575d20935d6306c724a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected