Overview
overview
3Static
static
1post-install.sh
ubuntu-18.04-amd64
1post-install.sh
debian-9-armhf
1post-install.sh
debian-9-mips
post-install.sh
debian-9-mipsel
post-uninstall.sh
ubuntu-18.04-amd64
1post-uninstall.sh
debian-9-armhf
1post-uninstall.sh
debian-9-mips
post-uninstall.sh
debian-9-mipsel
pre-install.sh
ubuntu-18.04-amd64
3pre-install.sh
debian-9-armhf
1pre-install.sh
debian-9-mips
pre-install.sh
debian-9-mipsel
pre-uninstall.sh
ubuntu-18.04-amd64
1pre-uninstall.sh
debian-9-armhf
1pre-uninstall.sh
debian-9-mips
pre-uninstall.sh
debian-9-mipsel
start-stop.sh
ubuntu-18.04-amd64
1start-stop.sh
debian-9-armhf
1start-stop.sh
debian-9-mips
start-stop.sh
debian-9-mipsel
fileflex
ubuntu-20.04-amd64
1fileflex.connector
ubuntu-20.04-amd64
1fileflexapp/common.sh
ubuntu-18.04-amd64
1fileflexapp/common.sh
debian-9-armhf
1fileflexapp/common.sh
debian-9-mips
fileflexapp/common.sh
debian-9-mipsel
fileflexap...til.sh
ubuntu-18.04-amd64
1fileflexap...til.sh
debian-9-armhf
1fileflexap...til.sh
debian-9-mips
fileflexap...til.sh
debian-9-mipsel
fileflexap...g.html
windows7-x64
1fileflexap...g.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
post-install.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
post-install.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
post-install.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
post-install.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral5
Sample
post-uninstall.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral6
Sample
post-uninstall.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral7
Sample
post-uninstall.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral8
Sample
post-uninstall.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral9
Sample
pre-install.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral10
Sample
pre-install.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral11
Sample
pre-install.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
pre-install.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
pre-uninstall.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral14
Sample
pre-uninstall.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral15
Sample
pre-uninstall.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral16
Sample
pre-uninstall.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral17
Sample
start-stop.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral18
Sample
start-stop.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral19
Sample
start-stop.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral20
Sample
start-stop.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral21
Sample
fileflex
Resource
ubuntu2004-amd64-20240508-en
Behavioral task
behavioral22
Sample
fileflex.connector
Resource
ubuntu2004-amd64-20240508-en
Behavioral task
behavioral23
Sample
fileflexapp/common.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral24
Sample
fileflexapp/common.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral25
Sample
fileflexapp/common.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral26
Sample
fileflexapp/common.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral27
Sample
fileflexapp/psvutil.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral28
Sample
fileflexapp/psvutil.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral29
Sample
fileflexapp/psvutil.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral30
Sample
fileflexapp/psvutil.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral31
Sample
fileflexapp/web/format-lang.html
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
fileflexapp/web/format-lang.html
Resource
win10v2004-20240508-en
General
-
Target
0010_999_1504501392_0010_74650_1501684608_FileFlexConnector_Prod_x86_64_03.03.0040.apk
-
Size
2.8MB
-
MD5
c7bfd5f8647edd8572fd697a5bb9cbc0
-
SHA1
cdfab9fac1e6cbb88571a2eb5cf8432ae192c778
-
SHA256
a0267d971e0954a3ab6a6227cf774f3f224371879206ab478bc40f3501483c1a
-
SHA512
d94e878411dd7fd60c92f6a2d3dc8a70e8286c9179bf1e2f285e33b86c0c0ad2de4f9b6754a62f3df03f4756749e0598b48cb122e1aa98982f6bf10482701b29
-
SSDEEP
49152:hwZKGZKJ9Kf/EdtAXlq3ahyBUNTg2kiVAYiOz7po/4yEt9oc0aLOSDuOlk:hIZKJ9dtAXlqIyiNTg2N7iqpoAWPZ
Malware Config
Signatures
Files
-
0010_999_1504501392_0010_74650_1501684608_FileFlexConnector_Prod_x86_64_03.03.0040.apk.zip
-
apkg-version
-
control.tar.gz.gz
-
control.tar.tar
-
config.json
-
description.txt
-
icon.png.png
-
post-install.sh.sh linux
-
post-uninstall.sh.sh linux
-
pre-install.sh.sh linux
-
pre-uninstall.sh.sh linux
-
start-stop.sh.sh linux
-
data.tar.gz.gz
-
data.tar.tar
-
fileflex.elf linux x64
-
fileflex-config.in
-
fileflex.connector.elf linux x64
-
fileflexapp/cnexus.client.pem
-
fileflexapp/common.sh.sh linux
-
fileflexapp/fileflex.client.pem
-
fileflexapp/psvutil.sh.sh linux
-
fileflexapp/sharefileflex.client.pem
-
fileflexapp/web/css/activate.css
-
fileflexapp/web/css/admin.css
-
fileflexapp/web/css/base.css
-
fileflexapp/web/css/bootstrap.min.css
-
fileflexapp/web/css/home.css
-
fileflexapp/web/css/send-logs.css
-
fileflexapp/web/css/settings.css
-
fileflexapp/web/fonts/glyphicons-halflings-regular.eot
-
fileflexapp/web/fonts/glyphicons-halflings-regular.svg.xml
-
fileflexapp/web/fonts/glyphicons-halflings-regular.ttf
-
fileflexapp/web/fonts/glyphicons-halflings-regular.woff
-
fileflexapp/web/fonts/glyphicons-halflings-regular.woff2
-
fileflexapp/web/format-lang.html.html
-
fileflexapp/web/images/done.png.png
-
fileflexapp/web/images/favicon.png.png
-
fileflexapp/web/images/logo.png.png
-
fileflexapp/web/images/logo.svg.xml
-
fileflexapp/web/images/logo_drobo.svg.xml
-
fileflexapp/web/images/logo_qnap.svg.xml
-
fileflexapp/web/images/logo_tplink.svg.xml
-
fileflexapp/web/images/passive_sprite.png.png
-
fileflexapp/web/images/pointer.svg.xml
-
fileflexapp/web/images/scr_domain.jpg.jpg
-
fileflexapp/web/images/scr_domain_linux_pc.jpg.jpg
-
fileflexapp/web/images/scr_domain_mac_pc.jpg.jpg
-
fileflexapp/web/images/scr_empty.png.png
-
fileflexapp/web/images/scr_password.jpg.jpg
-
fileflexapp/web/images/scr_password_asustor.jpg.jpg
-
fileflexapp/web/images/scr_password_drobo.jpg.jpg
-
fileflexapp/web/images/scr_password_linux_pc.jpg.jpg
-
fileflexapp/web/images/scr_password_mac_pc.jpg.jpg
-
fileflexapp/web/images/scr_password_netgear.jpg.jpg
-
fileflexapp/web/images/scr_password_overland.jpg.jpg
-
fileflexapp/web/images/scr_password_qnap.jpg.jpg
-
fileflexapp/web/images/scr_password_synology.jpg.jpg
-
fileflexapp/web/images/scr_password_tplink.jpg.jpg
-
fileflexapp/web/images/scr_username.jpg.jpg
-
fileflexapp/web/images/scr_username_asustor.jpg.jpg
-
fileflexapp/web/images/scr_username_drobo.jpg.jpg
-
fileflexapp/web/images/scr_username_linux_pc.jpg.jpg
-
fileflexapp/web/images/scr_username_mac_pc.jpg.jpg
-
fileflexapp/web/images/scr_username_netgear.jpg.jpg
-
fileflexapp/web/images/scr_username_overland.jpg.jpg
-
fileflexapp/web/images/scr_username_qnap.jpg.jpg
-
fileflexapp/web/images/scr_username_synology.jpg.jpg
-
fileflexapp/web/images/scr_username_tplink.jpg.jpg
-
fileflexapp/web/index.html.html
-
fileflexapp/web/js/activate.js.js
-
fileflexapp/web/js/common.js.js
-
fileflexapp/web/js/format-lang.js.js
-
fileflexapp/web/js/lib/Chart.min.js.js
-
fileflexapp/web/js/lib/bootstrap.min.js.js
-
fileflexapp/web/js/lib/i18next-1.9.0.min.js.js
-
fileflexapp/web/js/lib/jquery-1.10.2.min.js.js
-
fileflexapp/web/js/main.js.js
-
fileflexapp/web/js/password.js.js
-
fileflexapp/web/js/pre-settings.js.js
-
fileflexapp/web/js/qnext/connector/admin/controller.js.js
-
fileflexapp/web/js/qnext/connector/admin/model.js.js
-
fileflexapp/web/js/qnext/connector/admin/view/alerts.js.js
-
fileflexapp/web/js/qnext/connector/admin/view/defaultdomain.js.js
-
fileflexapp/web/js/qnext/connector/admin/view/hostoverride.js.js
-
fileflexapp/web/js/qnext/connector/admin/view/revisionstorage.js.js
-
fileflexapp/web/js/qnext/connector/protocol.js.js
-
fileflexapp/web/js/qnext/connector/util.js
-
fileflexapp/web/js/qnext/connector/view-base.js.js
-
fileflexapp/web/js/send-logs.js.js
-
fileflexapp/web/js/settings.js.js
-
fileflexapp/web/locales/admin-bg.json
-
fileflexapp/web/locales/admin-en.json
-
fileflexapp/web/locales/admin-fr.json
-
fileflexapp/web/locales/admin-ja.json
-
fileflexapp/web/locales/admin-zh.json
-
fileflexapp/web/password.html.html
-
fileflexapp/web/password/index.html.html .js polyglot
-
fileflexapp/web/pre-settings.html.html
-
fileflexapp/web/secure/admin/index.html
-
fileflexapp/web/secure/cert/cert.pem
-
fileflexapp/web/secure/cert/dh512.pem
-
fileflexapp/web/secure/cert/eccert.pem
-
fileflexapp/web/secure/cert/eckey.pem
-
fileflexapp/web/secure/cert/key.pem
-
fileflexapp/web/secure/settings/index.html.html
-
fileflexapp/web/send-logs.html.html