Overview
overview
5Static
static
1clients/fl...ber.js
windows10-2004-x64
3clients/fl...ber.js
windows11-ltsc_2024-x64
3clients/fl...le.bat
windows10-2004-x64
3clients/fl...le.bat
windows11-ltsc_2024-x64
3clients/fl...Ext.js
windows10-2004-x64
3clients/fl...Ext.js
windows11-ltsc_2024-x64
3clients/fl...ver.js
windows10-2004-x64
3clients/fl...ver.js
windows11-ltsc_2024-x64
3clients/fl...ler.js
windows10-2004-x64
3clients/fl...ler.js
windows11-ltsc_2024-x64
3clients/fl...ine.js
windows10-2004-x64
3clients/fl...ine.js
windows11-ltsc_2024-x64
3clients/fl...gin.js
windows10-2004-x64
3clients/fl...gin.js
windows11-ltsc_2024-x64
3clients/fl...gin.js
windows10-2004-x64
3clients/fl...gin.js
windows11-ltsc_2024-x64
3clients/fl...gin.js
windows10-2004-x64
3clients/fl...gin.js
windows11-ltsc_2024-x64
3clients/fl...gin.js
windows10-2004-x64
3clients/fl...gin.js
windows11-ltsc_2024-x64
3clients/fl...er.vbs
windows10-2004-x64
5clients/fl...er.vbs
windows11-ltsc_2024-x64
5clients/fl...dle.js
windows10-2004-x64
3clients/fl...dle.js
windows11-ltsc_2024-x64
3clients/fl...der.js
windows10-2004-x64
3clients/fl...der.js
windows11-ltsc_2024-x64
3clients/fl...ice.js
windows10-2004-x64
3clients/fl...ice.js
windows11-ltsc_2024-x64
3clients/fl...ice.js
windows10-2004-x64
3clients/fl...ice.js
windows11-ltsc_2024-x64
3clients/fl...ase.js
windows10-2004-x64
3clients/fl...ase.js
windows11-ltsc_2024-x64
3General
- Target LANOARC-windows-x64-2026111001-source.zip
- Size 29.7MB
- Sample261110-wthxeszz3m
- SHA256 ccad8c397cc2913fdce4ac177ca53f1fff8451a0281889fa988a3990de18fca0
- MD5 5c88b263bc2be487c6d2c77b7b835d69
- SHA1 2507ecfe01e644199f90d395e56e28b03f8b33da
- SHA512 236f47aa05cf1e954e1c3aa249106f8d8ac220875946227058156ba56823ef3199eb9c415d9ad410c05f65f365bb6db238f3d4fb28d06540a8551dba00e61832
- SSDEEP 786432:sKtpMlXJEEhH4uWD0drX1qJdSCEVeBZ0M:xelXGyH4P0dzIJqewM
- TLSH T11A6733B0EE166675F946B371981B880370FCE154C183B84FED54A388AF82FD18F6659E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
clients/flclash-member.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
clients/flclash-member.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
clients/flclash/Makefile.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
clients/flclash/Makefile.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/Ext.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/Ext.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceBroadcastReceiver.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceBroadcastReceiver.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceController.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceController.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceStateMachine.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceStateMachine.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/AppPlugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/AppPlugin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/BatteryPlugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/BatteryPlugin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/MemberUpdatePlugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/MemberUpdatePlugin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/ServicePlugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/ServicePlugin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
clients/flclash/android/common/src/main/java/com/follow/clash/common/RunIntentArbiter.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
clients/flclash/android/common/src/main/java/com/follow/clash/common/RunIntentArbiter.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
clients/flclash/android/core/build.gradle.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
clients/flclash/android/core/build.gradle.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/FilesProvider.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/FilesProvider.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/ProxyService.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/ProxyService.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/VpnService.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/VpnService.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/modules/MemberWakeLease.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
clients/flclash/android/service/src/main/java/com/follow/clash/service/modules/MemberWakeLease.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target clients/flclash-member.patch
- Size 1.4MB
- SHA256 d0cafebc70e7ade5ca9951c1278688420a50f9f7ca4e1f71e76a80b7e06eca70
- MD5 dd048e6908588b01637b0b47bc32618e
- SHA1 53bd4b0532e6a3f253beefd34b42b9d3f8642f40
- SHA512 25950c3aac1181fe7b89748bf2a7073145ec1b53226aa9d3d1a57c0bc83c1bb5c5bd0a368cd74f17f3842c7067d8e3e3fefb3b2cafd5524663b4cd7442d9a511
- SSDEEP 24576:c4D8rczAQBDySjXuIk+cc5cPyzS2xto1VO5FKZG6mgw5jxoZiJwL:ND8rczAQBDySjXk25Eyv5KGQwV0im
- TLSH T1BA65F1C118E900B059B703DE6F3F71496261E11B7FD468B9BE2E62407FC50D4A6B3BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/Makefile
- Size 345B
- SHA256 afc479855d6843c0463f266b799201e7db8d614c40a751081d4f7945bd3637b3
- MD5 2ea711a71e482d856a2c179dd6d9f4d3
- SHA1 0df1b892807753f1cb32139e350f38398b580424
- SHA512 2a496bbd733bb4295673561e66d651ac78ea244355770b8d604ea64fdcda3f02645bdc5b2b4a9a1440c37e8e46f30c36fdf60cf75ed680692548e948aa3e21eb
- TLSH T1DCE026951037206B2514BAFCF83008EC6EA579A180C63A42E10E1CF1E9930BA62DCD7C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/Ext.kt
- Size 3KB
- SHA256 9989954f9c9262e042a110d4b4eef270c91be2aa15e95c092ec8f38f595ca827
- MD5 63fe1f6b820a5fbb8e8f18f0b1a1e23c
- SHA1 aa19d52e6ae9a70aba78825562b89221b96a713f
- SHA512 b1ed70da508da923cfab5116f8ea53b88e1946deaec66e4f1293309ebd068958b27f81d0d7a8dc72ebc8cb7229b0e5b7d419dcf2c89bf576c7fdd013257abcb4
- TLSH T192716572528910818F397779392A22E8FE6612AB3F3150A43E5D627C2F31D04E1BEFD5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceBroadcastReceiver.kt
- Size 1KB
- SHA256 a2210c6300e5d4d2a2c044aa4dfe5e79368c82f5f0fe0717961c966a14f06ef2
- MD5 2b0de8eaa1d04db153258ef1f0a58793
- SHA1 dbe7e8b10db45110df66c431cdeaf9db3f8c19bb
- SHA512 1f192b46b47b762fff76479f28733ba6466375629267583ae40162af836ef73ebcaa9c3b62b9fcc0190fe39aad5beba1ffbeb301a9a91d1bbdb71972b34d4574
- TLSH T18831AF75B05834329A736363E41720E9AFB102A77A6ED0C83E8D93242FB194C9556FD4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceController.kt
- Size 8KB
- SHA256 c9905c3d07abee9dd626fbae1488ef242395f3e92f95f1b80a511acd8ae83ef6
- MD5 a4bbaf7b68ec5e9a16043528d8a4225f
- SHA1 7f14ea5d5c665abea179f0267c1518cb2eff7d1b
- SHA512 628f84259c5b05c9be414d919ffb8e31abf25ca4c1ed525300b77790d71859a7319f083cfa2c798a4dbb029813c70d3e8aca9412a0c839a2ceb42a0dbf532b9f
- SSDEEP 96:c3cVvsRX6A/4ZHT8UY5k21T5DF75Fp3NVpt/VcPdBspGdlrfHhN2iu2wl:c2xT1adZxRdgsCr2h
- TLSH T18002CA665AD505705AF393B2AC132165EF7612BF266E3040BFAC91B41FF0D0CA0A9FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/ServiceStateMachine.kt
- Size 12KB
- SHA256 ce42c3065022b417029ae56ae501e4c91f981d705100c90732ac08c5379e3a47
- MD5 8351a2a59976374dee7711f5af67fadf
- SHA1 c65d6441a358f2eabcfac97c77f9835cdca36650
- SHA512 c93f5bb5de723761ef390a8175b2e6f25b7df74c753643da52ee581fbb095731495cd7b731bd29c705f32453c2b43fc9a45c6ebcda76948e824dc69a6d68d5d3
- SSDEEP 192:cig7TFU6/GbPl6Nx5E6A6CRK+DfoQCYjWRrNdSR0N6lFgR6WxC7s2ApeKc:ciggtox5E6OScWRrNdSRY8ERpeKc
- TLSH T10C424E96B2821021CC7363BADD1712A5FE77D21F331A64617E6D62442F31409C2AFFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/AppPlugin.kt
- Size 20KB
- SHA256 c6792b44d5cdfdcc978cc9234b5320906395367b09a70043856be204615dfdd4
- MD5 f4057e0adc51a77449da94c268447572
- SHA1 c2cdf17471ed51a4df0eb1e98ef257685cf64f57
- SHA512 d7bf997d93617a3d55a868805d517c6d632da55b4de93b62cd8a1bd166781af2de2d2773359a38cddcdf33a7154c50f3b88bc80b92f8c0dc2fe6f84ee126dc6b
- SSDEEP 384:cK4DxYSL/IlsCfzRCDsfhjynztPIjeskY7:c5DxYuzsJGIVL7
- TLSH T1CB92955766CA217049B3D337FC1B2392EF6A21FB3A2E50B4BF6C91580F719409265F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/BatteryPlugin.kt
- Size 8KB
- SHA256 ceabf6076bbf4a362937012e015671478f53f30d105f7c680e5f9e36f52b332d
- MD5 115023815a2b5863df3f0191334b92f9
- SHA1 f27a50566b6ed0308cc3677fbc5addde0d7fbe9a
- SHA512 3666c413a759665f0797de887272b2a199fe84ebd43f23a4d518da9a4a3a14c875cda2ae21515f6ae50402a6e5bb5d9d412d2c6c0e79c0aacbb67bedfbc27e59
- SSDEEP 192:c1K8AZ0i3hqymlyPCcKvKauImq+Hl7IiwsIXBGyXwWBgwHbFv:cAjZ07/QCcn6+FxDIX82nBgwHbp
- TLSH T1EE0254B7A149205212B7E32BD6061257DF5972F3762980B4BF5C66184FF3900D2D1FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/MemberUpdatePlugin.kt
- Size 4KB
- SHA256 a7573f0c41c308e9db1d829da6c75b2055bd5e3a15d6d8f2ca41587fefa3dcea
- MD5 d619ea71d37a1ea5e0d71e8ebe8abb85
- SHA1 75c080347e9af1231657673c85000d9ef34d2271
- SHA512 816117fc04fe9bd86c2201272fb63a19f0dccb51884ce65d41e2f691d16f5e9a3eba242f5b8d9c9200220d5ca5f0ad6e8f67c1c1794f695cdd4694bf67e7a901
- SSDEEP 96:c1Q/HEyWErBKpev/SyRECvXECBWBISD6nwJg5HLZVjXN5aEswiq4TrGwl5Sgl8qK:c18HXwC8CUVwwWHk3lJwOOV/VL
- TLSH T1EDA1D8B3E79820611B07D3A7342812A13B69B3F363125C94BF0C621C9F06E7455E6BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/app/src/main/kotlin/com/follow/clash/plugins/ServicePlugin.kt
- Size 5KB
- SHA256 802681244f9d857c68fc14fa1c1da8c4abc5c016fa86e4d0957051de8735a082
- MD5 89f347e2d87f08bafecba111877d8e8c
- SHA1 0c32b74b19cdcb563c7ba6526543981baedecb37
- SHA512 aa8fbd49c5195ef8059bda6177dbbaf506d15251688266c9ccd0dd85951ee230a3c16da6e40a74fa8684170a2bfffaba0ca846df3d49d79cb9543635a7d3331b
- SSDEEP 96:c1mquK4wxmHtbbP6dQRZTzJ8dCjQUvVDiqfuCo4BzxLsNEiJhRC7xLIx41Uy:c1Kt4OfRZTzJ58C29UlL49JgLray
- TLSH T162C101969D9201718A7FF399CE5B01A3EF1A72AB662F54007FECE2115F74800B09EF94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/common/src/main/java/com/follow/clash/common/RunIntentArbiter.kt
- Size 965B
- SHA256 a68f6f0f8082ffb1abb8ff401852da4b57a21571a870ea13e6d8bbe1b61631e1
- MD5 2d4ffa68cb0de30365f52d82266875ae
- SHA1 2952732d127b7892d6154fa1aa5dca9f12cf7d75
- SHA512 03f2da491ed7ffe16c8497176fb73db28b75620362de1db606339112356a88abe7bc0e6398ea48db80fa0fcf65924d8072f2ae45bf0277b751d225595fc67a9e
- TLSH T1B211ED53959730A082B2CA86CCD59329DF21A156FA0ED851BCCD79D50F3588AA02B2ED
- MD5 SHA1 SHA512 TLSH
Score5/10Executes a VBScript file via the Windows Script Host.
-
- Target clients/flclash/android/core/build.gradle.kts
- Size 11KB
- SHA256 fb04e2e63dbd783c4cd3ad4be40ca6cfb3bcbe444a7d2913826bf462011fac46
- MD5 8fa291c8c3ecc16427c0eb94a70078a1
- SHA1 34b0ef40d250275e18e177b5f81101843622ccb8
- SHA512 e73669a01701dbb9a01e58ba55723d20b898df4575d51f15107d2d0e5dcc96b34f5a6535b87f909eabce2766b250a67c4ce718892eb77da56b9966119644088b
- SSDEEP 192:pNoLexshJRC8t7xtxBxRxsQxCI1Fwx7Kzfz4HloYdzaHsn4lDI667F76nRhQ20Mb:pNoeirRC8t7xtxBxRxsQxCI1Fwx7Kzfl
- TLSH T1FC324F3A925A15F255B36F61B11F2108EEB3529B4A36441CBFAC83407F39D0652D0FFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/service/src/main/java/com/follow/clash/service/FilesProvider.kt
- Size 4KB
- SHA256 191a3324adf6ea11d3bcf4b48319f575838f66af0148eb7b82431caab02548c3
- MD5 55756f8e68e8f1d4ab1bb790062e58fd
- SHA1 f51b7c97362f9c10a2eb7bb73de9ced2c38f973d
- SHA512 e16798ab8a25290be93820f98207df0bf7e3536792200a1c6dd49a5e516a5e6ece5aff506b99376fc569db7127d7f18001096a091bb91f904f1cbe723988b510
- SSDEEP 96:cNBoqVQZ4yt1aRGh9RGaM4fXVnFwQc3xzqYwcBhp:cNiLZ4yt1aRmRLv8Z3np
- TLSH T1BFA1F09AB5C3E3414CB31256B931C952FF7076ABB118BA57B67C1A811FB0CC29084EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/service/src/main/java/com/follow/clash/service/ProxyService.kt
- Size 1KB
- SHA256 a2771f9a6a797948ae1a524e2bba5723e4755bf0141630c5c357efc4793e229b
- MD5 07362d34977acb5d5378d5cfea642c0c
- SHA1 9a66e74ba186d5d84124176f6861bd97d1d8ddca
- SHA512 c2950580df022bbd19fc6455ed46900f95725b55140f42da7992d5e0ea25ace11811d19eab62647d54600d2254dfaf407a099c56d68bd010504f20d35d828316
- TLSH T1C42131068AAA14B2913B23A7FD031540EFA712FB692670417FED62251FB082811CCFF8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target clients/flclash/android/service/src/main/java/com/follow/clash/service/VpnService.kt
- Size 10KB
- SHA256 116cd3aacea2ad9ce4fd943c7e0ecc6cb5fa7df0b2f36abf4f2c64eee86b4395
- MD5 723082639ac14299672f39dbd1f558e7
- SHA1 12adef0e139049ade9967e8b11948ee2633e2029
- SHA512 e3a9d31325409699e7072b502f90de6e317c4f3913a23bab724207cc77d160b8402010b63daa69bad318d64a1417c609d3f972dae3ebc6fda4d22ecb0ef2ffd1
- SSDEEP 192:c/qb0gdK8elg2dV4w14B2MRk5LGz+3p7l9KE48/zG:cybfKhe2dV4u4gMR0Z4B
- TLSH T19C3264170A9621618473A37AED130151FE7B92F7762900857FBEA3A01FB1894D0F6FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target clients/flclash/android/service/src/main/java/com/follow/clash/service/modules/MemberWakeLease.kt
- Size 1020B
- SHA256 e2d837091c6a683e13c9d560fad7b2a35ef2439b10d50b866179d03ff856c383
- MD5 cf37d1de3962108a2c1cd49053aaf092
- SHA1 1de4e8437c2a6970668609015dae31cd0057e09a
- SHA512 703f6fb93457f8e6599a961aa3b808e18ebcd3bf9fcf378e42bdd355deb0d72476b3127d8cb1e19c2a33467bd10a387c1a09d53e8d6813b22b036a9399430c31
- TLSH T1C4113A198BF416304203D0B5AE8B10B62E6876CB1B4F7E54FF4CE2129F22530C5AEF89
- MD5 SHA1 SHA512 TLSH
Score3/10