Overview

overview

10

Static

static

7

2fcc12cd70...48.apk

android_x86

10

2fcc12cd70...48.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fcc12cd7028a96dfcfc13813bf3ae05d21dbbb1d72db6c16c71e32b641e5348

  • Size

    16.4MB

  • Sample

    220417-ryp43sahf2

  • MD5

    61e42d5efc9467ad98fee9968a69f6bf

  • SHA1

    9fbbccf1a3abc26c943e26df188de3214a4d5bd4

  • SHA256

    2fcc12cd7028a96dfcfc13813bf3ae05d21dbbb1d72db6c16c71e32b641e5348

  • SHA512

    97abf8be3940c239206423e972a5240111282716fa27dc7c71c2aba0ebe33cf97fdd369e93b6fb3aa41761b6f5177d051558e7d08673954757ca2b396377879a

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      2fcc12cd7028a96dfcfc13813bf3ae05d21dbbb1d72db6c16c71e32b641e5348

    • Size

      16.4MB

    • MD5

      61e42d5efc9467ad98fee9968a69f6bf

    • SHA1

      9fbbccf1a3abc26c943e26df188de3214a4d5bd4

    • SHA256

      2fcc12cd7028a96dfcfc13813bf3ae05d21dbbb1d72db6c16c71e32b641e5348

    • SHA512

      97abf8be3940c239206423e972a5240111282716fa27dc7c71c2aba0ebe33cf97fdd369e93b6fb3aa41761b6f5177d051558e7d08673954757ca2b396377879a

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks