flubot_v4[.]2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c[.]apk

General

Target
flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk
Size 3.3MB
Sample260219-mt89yacw9h
SHA256 368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c
MD5 18a22b14306102b5338df7fcbe2a15f3
SHA1 059c431de02c36286c3f3ade01cabf40ebe41678
SHA512 203a6f15e27f2852c17077318c84f1e1178f8e19f1ea0d563898947c3b68898e9de9e6f0440b420eecdd8f5c86b980da3e5ac7312ae834c9965df0cf769703bf
SSDEEP 98304:TyRqfMl5ahj8hJCIr0efLa71qtuHynXrLd:aqCahj8hf0SIkx
TLSH
T1E4F52257DAAFB02BE26BB2B4E07524979B0D014CDA05F6293936A1948EF7D04DF41F2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk

File Explorer

flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk

.apk 3.3MB

flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk

SHA256 368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c
MD5 18a22b14306102b5338df7fcbe2a15f3
SHA1 059c431de02c36286c3f3ade01cabf40ebe41678
SHA512 203a6f15e27f2852c17077318c84f1e1178f8e19f1ea0d563898947c3b68898e9de9e6f0440b420eecdd8f5c86b980da3e5ac7312ae834c9965df0cf769703bf
SSDEEP 98304:TyRqfMl5ahj8hJCIr0efLa71qtuHynXrLd:aqCahj8hf0SIkx
TLSH
T1E4F52257DAAFB02BE26BB2B4E07524979B0D014CDA05F6293936A1948EF7D04DF41F2C
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

e203bffd0a7fb66e257e93d36bdc6a9f274bce0bf80a3d86f1782bda930e957d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.dictator.movie

Android Permissions

flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.READ_SMS

flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk

File Signature issue

com.talk.time.p638ebd54

com.talk.time.p05f9560f

com.talk.time.p7c9f21e3

com.talk.time.p3cb7d6b7

com.talk.time.pe795bd05

com.talk.time.p1d81881b

android.support.dexpro.CopyClip

com.talk.time.pede2c78c

com.talk.time.p91564b42

com.talk.time.p4c4a83bb

com.talk.time.p65fa7fa4

com.talk.time.p800c47cd

com.talk.time.pd7fc8ca3

Sharing

General

Malware Config

Signatures

File Explorer

flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk

File Signature issue

com.talk.time.p638ebd54

com.talk.time.p05f9560f

com.talk.time.p7c9f21e3

com.talk.time.p3cb7d6b7

com.talk.time.pe795bd05

com.talk.time.p1d81881b

android.support.dexpro.CopyClip

com.talk.time.pede2c78c

com.talk.time.p91564b42

com.talk.time.p4c4a83bb

com.talk.time.p65fa7fa4

com.talk.time.p800c47cd

com.talk.time.pd7fc8ca3

Android Permissions

flubot_v4.2_368cebac47e36c81fb2f1d8292c6c89ccb10e3203c5927673ce05ba29562f19c.apk