How Flubot targets Android phone users and their money
Tags
country: Belgium China Denmark Netherlands Germany Finland Italy Japan Norway Spain Sweden Poland Senegal United Kingdom United States Of America
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Contact List - T1636.003 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 6c4c25ed-12b2-4a7f-86ec-2e4cc94f1d63
Fingerprint a2b526608901a288
Analysis status DONE
Considered CTI value 2
Text language
Published May 13, 2021, midnight
Added to db Feb. 18, 2023, 1:02 a.m.
Last updated Sept. 2, 2024, 10:53 p.m.
Headline How Flubot targets Android phone users and their money
Title How Flubot targets Android phone users and their money
Detected Hints/Tags/Attributes 84/2/9
Source URLs
Redirection Url
Details Source https://www.nortonlifelock.com/blogs/norton-labs/flubot-targets-android-phone-users
URL Provider
Details Provider Source level domain
Details nortonlifelock.com www.nortonlifelock.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
iixoqoiphdhkdbq.ru
Details Domain 1 
pvvbjvedsmjphil.ru
Details Domain 1 
tlfboldhmeehvwl.ru
Details Domain 2 
com.eg.android
Details Domain 2 
com.taobao.taobao
Details File 2 
classes-v1.bin
Details sha256 2 
74183f6454d2aaa44fcb363eb71beb33f04845c7fe4b402d06a87bab7b99e235
Details sha256 1 
5c3384bfeb479db3f1ed98578c80d1e3859640ea7cbfe62fbaa9634118cf4636
Details sha256 1 
5c9057d6d19f82fbba255d58e9b0da7102fed08ee25e548e08f0a5b22efc42a2