flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c[.]zip

General

Target
flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.zip
Size 4.0MB
Sample220712-m7864afdfj
SHA256 4c953442147ebe89db0c35a0b57f63a746d122407cd6c8d69cb037bc00ecc940
MD5 d5371989516dab98a373b17e25d1164d
SHA1 75e86469bc1997bb21c54531811edf94de06f4d4
SHA512 0d3fa2bc5081b7a4afebb65b600da28b64abf140354987449a5c224493e772d6f8593cb8bab35a9369d6e62987b2f8650c76606cadaa07487335a713f84502a4
SSDEEP 98304:gCATg9iNPRJ7I10HJakgdxMLBAMqY5YuNqc5AYX92EqOhj45rCnqzx:gvUkxoMJakgdCLBkY5jNKadq75Onyx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.zip

.zip 4.0MB
flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.bin

.apk 4.2MB

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.zip

SHA256 4c953442147ebe89db0c35a0b57f63a746d122407cd6c8d69cb037bc00ecc940
MD5 d5371989516dab98a373b17e25d1164d
SHA1 75e86469bc1997bb21c54531811edf94de06f4d4
SHA512 0d3fa2bc5081b7a4afebb65b600da28b64abf140354987449a5c224493e772d6f8593cb8bab35a9369d6e62987b2f8650c76606cadaa07487335a713f84502a4
SSDEEP 98304:gCATg9iNPRJ7I10HJakgdxMLBAMqY5YuNqc5AYX92EqOhj45rCnqzx:gvUkxoMJakgdCLBkY5jNKadq75Onyx
MD5 SHA1 SHA512 SSDEEP

Password

test1234

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.bin

SHA256 fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c
MD5 37be18494cd03ea70a1fdd6270cef6e3
SHA1 4714aaa5195da29c6e74aeee9e9f19678af5c15b
SHA512 5452d2e545c46b94d3209b332fea6e87727039371688e2ae63ad303c014db5e7b5d4222d4dcefd703fc4a4f15e6f685ec5e62cabe396573bed0e0f78a40d679f
SSDEEP 98304:ObOoMyx7cvw6sscAANEowsE/6spqR9HTUzFRUkLqQU1K2b:HHyx8BAeowsEyNR2zFRUYab
MD5 SHA1 SHA512 SSDEEP

android

com.tencent.mobileqq

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.zip

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.bin

com.tencent.mobileqq.pa4998c1b

com.tencent.mobileqq.ped124d07

com.tencent.mobileqq.p6c3db1da

com.tencent.mobileqq.p7a1c6fe4

com.tencent.mobileqq.p3089aee9

com.tencent.mobileqq.pd7d08a0d

com.tencent.mobileqq.pbd7239c4

com.tencent.mobileqq.pfc70bc4f

com.tencent.mobileqq.p46dad517

com.tencent.mobileqq.p27a06467

com.tencent.mobileqq.p23103a1e

com.tencent.mobileqq.pd92e13f7

Sharing

General

Malware Config

Signatures

File Explorer

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.zip

flubot_fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.bin

com.tencent.mobileqq.pa4998c1b

com.tencent.mobileqq.ped124d07

com.tencent.mobileqq.p6c3db1da

com.tencent.mobileqq.p7a1c6fe4

com.tencent.mobileqq.p3089aee9

com.tencent.mobileqq.pd7d08a0d

com.tencent.mobileqq.pbd7239c4

com.tencent.mobileqq.pfc70bc4f

com.tencent.mobileqq.p46dad517

com.tencent.mobileqq.p27a06467

com.tencent.mobileqq.p23103a1e

com.tencent.mobileqq.pd92e13f7