Fake Adobe Flash Player acting as banking trojan

Beware of this fake adobe flash player, it actually is a banking trojan which will try to steal your banking credentials.

Banker Trojan is a malicious computer program designed to gain access to confidential information stored or processed through online banking systems.

Indicators of compromise

HASH type VALUE
sha1 fc16ddd145ce1643c09739d38cca5ea0d0956367
md5:md5 a1f78127653244633a6aca52ac1e414c
sha1:sha1 fc16ddd145ce1643c09739d38cca5ea0d0956367
sha256:sha256 de23366b18ad360a1adacb2fdc54f80b257c556ab58e261ce726696fbadfb52f

Permissions used:

permission:text CALL_PHONE
permission:text CHANGE_WIFI_STATE
permission:text DISABLE_KEYGUARD
permission:text GET_TASKS
permission:text INTERNET
permission:text READ_CALL_LOG
permission:text READ_CONTACTS
permission:text READ_PHONE_STATE
permission:text READ_SMS
permission:text RECEIVE_MMS

Additional information:

  • https://www.virustotal.com/#/file/de23366b18ad360a1adacb2fdc54f80b257c556ab58e261ce726696fbadfb52f/detection