Analysis
-
max time kernel
3401581s -
max time network
160s -
platform
android_x64 -
resource
android-x64-arm64-20220310-en -
submitted
26-03-2022 08:18
Static task
static1
Behavioral task
behavioral1
Sample
d8e043f94d9cc95445d0973cbc6314b648531c9194fa099ee8930cc6f1f17d16.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
d8e043f94d9cc95445d0973cbc6314b648531c9194fa099ee8930cc6f1f17d16.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
d8e043f94d9cc95445d0973cbc6314b648531c9194fa099ee8930cc6f1f17d16.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
d8e043f94d9cc95445d0973cbc6314b648531c9194fa099ee8930cc6f1f17d16.apk
-
Size
2.8MB
-
MD5
c41360b6bf3580831043df9bf82d8b13
-
SHA1
4d07d360cf5da257c5cc74eccea097be46171608
-
SHA256
d8e043f94d9cc95445d0973cbc6314b648531c9194fa099ee8930cc6f1f17d16
-
SHA512
856a393ab012206b9e88979983f19b3cae1c084d4ff3705c3c195bd23e3e621959f40b9ad194588a105353dfc69be666bb1a274cb3eca21795c146728da637ad
Malware Config
Signatures
-
Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
-
Queries the unique device ID (IMEI, MEID, IMSI).
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes:
dex.gu.trl.mhappdescription ioc process Framework API call android.hardware.SensorManager.registerListener dex.gu.trl.mhapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
88KB
MD5c577cbcb7b771216093d21ff7c09fbd1
SHA133946d5e546fe7648c2e4d161b94a33bb5936ce6
SHA256f3d678b3991a225eeab61002a3c018ea9bfce396fe41920ddd05db469ff0429a
SHA512da95c37fa372c1175d476c75f7b3ab8c098099c2e9297182a8ddcab4d54b8209d82d95a9f7d2c9f095ed7cf8ec6e5550b08860069beb0ef65da7a3ed030bd81b
-
Filesize
1KB
MD5e83037575d8e88c7d936617ab5dd8330
SHA1a5c86d9848100b046486a7c09d8a103509c927ee
SHA25642c3f4cc69af9d4a787f5229092f52ad3dbe79d884bd29af27ee61cc39c1f06a
SHA512f86fc42990b1227a3faa860c84b23995e6aa566a66d099fc62e76029b841168bbbd39600832c6d36d4b763aad24af572d48a0cfce1c9a086aae79bc4392c64b4
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5b27e61e1cd642cb92173584e3d282b3a
SHA138d6c7253762a3f1c024f7b33715ce889feeb522
SHA256d038a7572f7591f4f8d933caed11d744457dcbc95bfa53cf16312d301a8119c2
SHA51229fe86c4ee810f0ad5717dc7f12875ca01beaebf7c68a34bb67471d7907fbfc90f8a9fabdbbb173c5185e26faab84ddd453deeffb22882134a04dea8334bc815
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD5cc71d6056e05ad13b6c78efb63f80acd
SHA14f50198a03154ebe5b808af583f5dc70082759a9
SHA2569e0660e63214c0449c9e520eae5283705502eb72be83a3f5d8f3a54a8c319384
SHA512d60f4eae20081662cb5343700c353b84c31852891e4e57505795e59ae7db626faffd4cf9412568279dc2bde27737d4e1eec728ac03d4808ed3090bce396f3fb1
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
22B
MD5cca2cef5fe2c97d936e81cbcff06bd2f
SHA1b7bdbbff35ff73b61144862ee2694623391d3bb6
SHA256573576a4187961bbf6d5586da034733a999e61f587bb9eb5d2d727d4d607d0e9
SHA51215aa7e542fda3a1b02d644d01891a748e1e647f4031c972034aed40096631baccf6b4a6735a896e2c919e69ff971b0c011b6abbc17c33e9d4ce763fbb4054810
-
Filesize
40B
MD5bddfdc9a8e5149ba8d9aed2f5cf1cced
SHA1519f091e6ce8c73639440bbc839ed61c10851bf5
SHA256514e2859aa5b380eab1a9a8e369c584adc0b52c3a3c90bfff4b2c5458277e73a
SHA512f5e5c0b974967b46281748a088f749473c3fc97b22f2cde8e1e7255c0a76c5f76c856969c5d2e1e8f77afaf4c3445eef9aa5950f34bdf03cf4b197cbb9d7f951
-
Filesize
110KB
MD5721bb375c5744ef5509b2875d322a8ce
SHA12791da5b9ff53f03205b91f582ed6daf52018c94
SHA256a6fb43f00e566ca2d13207091d09e14fadc351ff82a83412d0be20ac6d147deb
SHA5123cab00fdb760cc27d766ea9c9f133fb9c23d7bc5d8cead19b17603c1be82336156b0e4404113451dc7781a24a9f56b54c7408e0b5095c964f4ab38ad7f3219c4
-
Filesize
10KB
MD5206c2f2224f4d40069e890fe1e394908
SHA16abd1ea4cbe95326f4ec66a1ea7e6aaa246a44ce
SHA2560af62117e71d7e81f1772f45e499bf666125f9f91ba927988ef4cbc51ddebbae
SHA512faafc59efc2b6cabb7019521f83be737ee5d357cb627906a2d43368e1561ffe78710c1f30c3a538df81f9beaaf84ee330dec18d5e9302c12cab7f74bf5c83b4d
-
Filesize
748B
MD57babc6d83a7a6131a7422d13baf45fe9
SHA1ad6f5d96f322519d215b15a2c5ddef5e5503b1f2
SHA256c0a9acf5b3a8f4f85fdbdeeedc29c3d5ff459bda6ef4c71646c87a87195c959c
SHA512e5a189afcb4120cd8b584fdda4f84d0d37ea6f30692d1c029079813b44e0d06a9773cd46a435bd18341cef3879c063f3253126dc9372c7cd7083cfbcb8b868b3
-
Filesize
320B
MD5e6b525d4896f51f795b4d07b79a9371b
SHA180d727efa6bb11af7bdc3971b4d8618174293c29
SHA256e57014fe7aa4a76f6f3279cf361c79bacb9001c71953cdae91ac1e44daf0f61a
SHA51293cf3d9d1f11ee39190cc4514227277049127d9c7ac4843324e8a00aa78c1e7b96e3bf3a40f76ff967a26c449c9fb63a03e5625995d3dd3dd9cc63927ec21ae1
-
Filesize
320B
MD5def934bae36aa277ed7e50dd5b22f192
SHA1d3090f3c1d41eb87252e58f6ce1b15aaeb05ce10
SHA256325b05419601b4bc78446589013f84d0003ab20d8fc4b20b9d510811d4f68d50
SHA512e970cb5a8ca0b89092416eacf8c26741cf98915dbc5daa302c54d4478b1c66e4c38d12870960fbcd82ababccdfafa3f72fefb806dae89b07cf71fe16e10a8aa1
-
Filesize
16KB
MD576c3872b9d85fb44d63afea0475f1047
SHA1658af41630e0f90c74da6535f0e058733f4e08f1
SHA256b1f8bad8ced4332259ad740d4cc4286fce98decf5358c50c23c95b623b7c8e0f
SHA512adad54a3a40bca8001783ee677e9f6d249fd205e95aa3e1fc2c5384e51635a2a3a3d646e840c48f08ad53817a30754ff35f47fb6cde6a0ae751ba96a62c7695d
-
Filesize
11KB
MD5ab961f069873d54a3c7c25444682db12
SHA1a7620a9eb7fa273757f34697a8607f5e4019aba4
SHA2560b3a53ffaa874688f971051efa4e013b49ed32547fc239412d1203fc42582624
SHA5124a63c7832c87d731906743a5fdef25088a992dafd6f09e120243baaebb492f846bb0661da1f31ba1ae3c96fba83ff0b02f83c8bde87cd878b176b4c093a41b0d
-
Filesize
14KB
MD52b667eec9d9e619be2ff21a3938f1902
SHA196cf19d1ba824fd7a4ba7fe66e2d78fb315d6b51
SHA2560fe9c0f4e49f7bebe7a5ed00e2341bc0266cf2f7fc12a9efa6d08e2ab5e7e449
SHA512c21183df9a4f083c748b5f641ad54c770204a5ff3efccefbab775d3e46684c094dbd2873f4dd63fefb6f2f9f9a63aa6fbf7e1cc5b4a979be3587a0743936ac29
-
Filesize
9KB
MD5677d37af7cc74acfad55d02b08b247b2
SHA18a56b17f673677153c1fbd956ce630363b8ca243
SHA256e8919c6f96fe8f1e871299ab94cb3efda3d951dfc786662b23189611a24cafc8
SHA512d6745d4641926a39a5884b3c13cdd2ed6897c75751f0bdb6448ca847a511968b62e25ae4b305723aa31cab6325fa37db9b5d23388b0d965f57628be34916c6d7
-
Filesize
256B
MD54b7872b2eccec9699a52669f5ef9c05b
SHA1b100d5f36834b57de47e33c160fcfc735f338a99
SHA25643f5c48240bf525d64bec6c84d566b2fc01f46b0b443cdac2dc1071040e4386c
SHA512875c3185584d8de6d3f38e99449c1330c438cd8e6e261900142ba6c1404d6568972e3dbbe279e1b94c1a2268506a84da9181fd1d21e0dc0c7f3de27c0e933259
-
Filesize
364B
MD5f5a4a462a5325e199ecc65e03d5a9dc1
SHA1d49756985076530730c965c9ab0052406f8acac5
SHA25645885d3fa3fdc90a726d0e3c6ce92038a0a567ce368fa035e0036feb8d0d9731
SHA512c1bdf2933f16ce51a27c21a9790e1b18db0ea5cbdc89530c3f27bc0c4df4fa08b5c2b7cbd5a1bb45f17a00b8b5c7137d9f233a3d7f590a969677715712b942d0
-
Filesize
366B
MD5eec00ded1bbfaea7204edc2d6e3feb13
SHA1fb6d3afcf3d3acddaf759cb11612c6d1da4b55f2
SHA256ff22dfb7792e738bd966e23cfd2c5a417e75f617085be52eadec8301825cf244
SHA5126c9cd94ea4cbce1612e50d1eb38e9a85bad3dfb5b5e5385ee7175477da2a3723bb37630f76536f8e0f24df39940747fc153490c9aa5f83799654ab051debf00f
-
Filesize
289KB
MD5d4585d50c1c77798b6f6c1ee13cbab39
SHA1b1e8064e7fac3406a8945bb3fcaf80b129429d89
SHA2561fec7553b2ea06f5c0dc6a80835f4dc577eaf6fc26e27599ff5732810f9aaa52
SHA51237cbf3944c2a07ada028c6d31c48fb907c86835163a7c27a2ad853f82835539f4e251c80eb9143789dc5ce9d9b0f9cbc3c23686ed1bcd30278b5e6ed06b67588
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD55dc06a4b92d66d34b100a7d4d2c5b4b2
SHA10fbf27a9de52233390b5dbab647343f5b656294d
SHA25600673ed83e46c20b274672d6d05b4067b2e963bb96db08ac2179763c85273afc
SHA512f0f3a3857fcffc2911c77f7c091521cbc8ba989138da6687821e9344c7c5caed971783765f7008f7b86719109b4aa3c4f4b41fb869aedacc4e57205e45f195ae
-
Filesize
240B
MD50eb943471beeece0fb21f03d3df3f59b
SHA1fce0b1c40fb60df4ef9aae64644f6ce6654119f8
SHA256be60aeeec553816827e022d9ab9e351a312f1e35da35d4e9f46fb46c00f20575
SHA512c225f490b547c0e8d52f3436182601fed90e535a3c591fae118fb0b771c3563739c26bdab60bd4c817d337fffb0dd4c8a4015b1a494647c26d9396c8264cb158
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5f73a31c10fc54ae7df041a201463b2bd
SHA1a49eca16fa0452e7f46c3c3fb3511e564bdda2f8
SHA25691970421c36dac9b944ad8ae901b6a634cfd1426cb2c6936d35c1b7537e67dca
SHA512047fcc3cca1cc0c29e0506e0bad4a9dec488aa40a97341b941aa43d55ebc916805c4e63a45ac8324d83e7f0cafede09028bea77c446f223995e464a8c26cc626
-
Filesize
16KB
MD5020c8d753f6984e038931a6c362e07bf
SHA17d8422e132ece0ce14173ce1d3231e9677032c80
SHA256406560b010f5ea02d64b46ec93f4f442f73a734aba372f6005261be45716c18d
SHA5124ba3a2b28ff9ddfb0e6b222de3e08a7b15aa1a8c1a0d5fdef9b94ac7e5c23e76baa419c3c404496aaf65cdc902c96d5660520bff1e1f26a584964793f79633b3
-
Filesize
37KB
MD5fd150e230b37f86abfb4ecb98e5151e3
SHA189d33b633fa41554f8e74fd35d5b24893d9cf8a8
SHA2566ea35370329a0a889721670feb0a4912cc95419c81ded00f5fea76120513f238
SHA512ccd810bde5ac839fa25804e88aaa861a14e812985cc3bc5a257d9c9350297521b68a7beedc4b27e13a3e91fe1d7ebb0d700746d55d5374d806b6e47cbb9468e0
-
Filesize
886B
MD56ae79f1f9754ded7cb1e4ffbe2718a93
SHA14deb05a58fc9bfbc9146e1506201657f878c5f6e
SHA256b9f19da9ab2284b8da317f6bc5777592f8f55593db046de5e6274a108107fb9c
SHA51296b17f3f98044a94d264fa08cede8a7652a396d14452160d82a27d5abc740fc5ade28df5c58242928067c01f860abf2333cb869873f49fb047c36b1cbfa2aa19
-
Filesize
296B
MD596eb7d481c96b983e17c6a697e30bad8
SHA1681d5139362dc6d3a05553ba711e3c469aa1c35d
SHA2561a73de9b4a518aa88771ebd92371b155f71ab22e13a231ffafb60991bba79f75
SHA512acfbc40c6017fccef9a5751a365b2ebc6d8a76be118bd2f32668f645e33ab86550b07301bf982ea21201749d930a11e4820169194f07a1f1fbba0a7b3e943878
-
Filesize
9KB
MD59b6997da6015da978fcc35ba10137097
SHA1d0bfb2e570fbd1f22a90ed215916fdcf2bbb5d08
SHA256c34b2e8e5ab19d3089d5a6a5638974157a2fc0c69bb54a2993fe1cf0f784d692
SHA512258f9f658f9ceddc709e95555ac8f1f6d2d6c48317d6bf54f44b71689092624dee524b5b4b54fab511b68a2bb09e5fdde67e4c9fa40acac940ace3ab3adc6a3c
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
144B
MD58aa94830f50ed6c4dee5b0e1f5c4486d
SHA1cedbc156919c716fe74f11c05e12c6566f9b545b
SHA256d1eaff954d46e43314f6a99041059085bddecc8c3e10ad35fe893796f9a1df31
SHA512ee981d3eea5e70db0c4d80e5dcee553a8e8c02b9f7440ab46373418cb837fff7a41953f5564460226af8d579c17e03781ea32a3703c0d5c6c873f0f137364c4f
-
Filesize
624B
MD5e4ad8aa9557a8460eecd2e90ce775baa
SHA142b5dcef7598e0f740d1de43cf88fa3f5256d1d2
SHA256de17c801a86a772d5e02a42f4a8163f7c4b17e8f8caa2a7aa839fcf9691148a0
SHA512dd10f610e4085adb22f72b6e84598662f4c9c3f4bbcf48a3291df611b1aedfc1d806a85c5e9c7e6b706592d2d4f22720a6e6270a80be6adf3b3b775ab8f491c7
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
/data/user/0/dex.gu.trl.mhapp/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNjQ4MzczOTM4NTU1
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
350B
MD534bcf0cd4f68ea4260bc994f9188b5f7
SHA16f2866d2744557db891ebbdfbefd8140e6ded0f3
SHA2561648551a905843d55bcf73097666e537c3671b9d7170bb958969c1ffc9751246
SHA51286ff5b5adb7aa710bd0fa8fe1e771f368e4834424fd6ac731c35bb6b3874b9ab165760cb0fac81f40068d039785eaebb82c63e33f95f49212d80f2bc28bb09d8
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b