flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799[.]zip

General

Target
flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.zip
Size 2.7MB
Sample220712-m77y2aacb3
SHA256 2d5db9673b6ea665fdb9a9cb321b7bde69048fb27f80ba1071b22b9e78855484
MD5 8c654d89ffd283b6aa38a19d5d8929f8
SHA1 489f0f6cea8cb4b15cf9d4bb57b46115e7e64909
SHA512 cdbf5cecae9e0eed47fe99f4ba8f3bbee031a1068fec2df5c7955f77f5de6fc7e222947b9f6b4ccc074a26f25b2efff761ae9c50d8a4a3b0b1a54a229ea60661
SSDEEP 49152:c5JHlxSwOpp4jzdrd8gP9AfGHMFJtGtvsIdrHfuyGXGIKj6kHfADujR8QaBIj:cLFxSwQrgPauHCG/4xZkHf8uGQaBIj
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.zip

.zip 2.7MB
flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.bin

.apk 2.9MB

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.zip

SHA256 2d5db9673b6ea665fdb9a9cb321b7bde69048fb27f80ba1071b22b9e78855484
MD5 8c654d89ffd283b6aa38a19d5d8929f8
SHA1 489f0f6cea8cb4b15cf9d4bb57b46115e7e64909
SHA512 cdbf5cecae9e0eed47fe99f4ba8f3bbee031a1068fec2df5c7955f77f5de6fc7e222947b9f6b4ccc074a26f25b2efff761ae9c50d8a4a3b0b1a54a229ea60661
SSDEEP 49152:c5JHlxSwOpp4jzdrd8gP9AfGHMFJtGtvsIdrHfuyGXGIKj6kHfADujR8QaBIj:cLFxSwQrgPauHCG/4xZkHf8uGQaBIj
MD5 SHA1 SHA512 SSDEEP

Password

test1234

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.bin

SHA256 08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799
MD5 6b5da3300ced10ba3a623e5e1237ad1e
SHA1 1918850207a582012c541b24e0dfa243f0a90671
SHA512 ab3521226f60d5ef83e29e74e9d3fb979450a2da8c9909ee6997b8af5288f2b5170f9e387de3681c670490d9af27e47efcacd2b6e868c6905bcbf0f29adbf93b
SSDEEP 49152:7evtEgVhOhzs8FOGBaVfydwEq+ufGK9bR4n5M/D0NcxZBQ2E2:7xg4imwEq+pKQnDyxr1
MD5 SHA1 SHA512 SSDEEP

android

com.tencent.qqmusic

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.zip

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.bin

com.tencent.qqmusic.p8c3b1442

com.tencent.qqmusic.pa7640c99

com.tencent.qqmusic.p23cf5803

com.tencent.qqmusic.p36ade4fc

com.tencent.qqmusic.pf8d7792c

com.tencent.qqmusic.p91de6dcf

com.tencent.qqmusic.p8d88398a

com.tencent.qqmusic.pd3135592

com.tencent.qqmusic.pbd40fb83

com.tencent.qqmusic.p004fa17a

com.tencent.qqmusic.pd8fa385f

com.tencent.qqmusic.pdfe6257e

Sharing

General

Malware Config

Signatures

File Explorer

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.zip

flubot_08d8dd235769dc19fb062299d749e4a91b19ef5ec532b3ce5d2d3edcc7667799.bin

com.tencent.qqmusic.p8c3b1442

com.tencent.qqmusic.pa7640c99

com.tencent.qqmusic.p23cf5803

com.tencent.qqmusic.p36ade4fc

com.tencent.qqmusic.pf8d7792c

com.tencent.qqmusic.p91de6dcf

com.tencent.qqmusic.p8d88398a

com.tencent.qqmusic.pd3135592

com.tencent.qqmusic.pbd40fb83

com.tencent.qqmusic.p004fa17a

com.tencent.qqmusic.pd8fa385f

com.tencent.qqmusic.pdfe6257e