Overview

overview

10

Static

static

Edge light...9_.apk

android_x86

10

Edge light...9_.apk

android_x86_64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Edge lighting For Galaxy S20 S10_v2.2.9_.apk

  • Size

    12.0MB

  • Sample

    210206-2p7rzw6v1s

  • MD5

    26cce55e22354abbeff8bfd126b0e99b

  • SHA1

    546452f5a91ac2e1739af5d686439e440e68d57d

  • SHA256

    47e20cc73ae09500a27beda4295051bd5289d0d5b52b7db0e7fd34485ab4214c

  • SHA512

    c8b66d18b09cd25dc0f45cb23a8c2b1aeadb6854960f3616923dbb9059186cd93de19d13a14840a6ab3d4bd72a28ff2981b159c246b8cf9b38227678cd433ae4

Score
10/10
agent_smithadwareandroidevasionobfuscationransomware

Malware Config

Extracted

AES_key

Targets

    • Target

      Edge lighting For Galaxy S20 S10_v2.2.9_.apk

    • Size

      12.0MB

    • MD5

      26cce55e22354abbeff8bfd126b0e99b

    • SHA1

      546452f5a91ac2e1739af5d686439e440e68d57d

    • SHA256

      47e20cc73ae09500a27beda4295051bd5289d0d5b52b7db0e7fd34485ab4214c

    • SHA512

      c8b66d18b09cd25dc0f45cb23a8c2b1aeadb6854960f3616923dbb9059186cd93de19d13a14840a6ab3d4bd72a28ff2981b159c246b8cf9b38227678cd433ae4

    Score
    10/10
    agent_smithadwareevasionobfuscationransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads name of network operator

      Uses Android APIs to discover system information.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks