Overview

overview

10

Static

static

7

23b601a25a...42.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23b601a25a5fcc28f56f9d72145973fe8f830355c26f354094759eb010b40a42

  • Size

    2.4MB

  • Sample

    220502-snw1bafhg4

  • MD5

    22925ae7ba90c2c0406abfb0ea7149c3

  • SHA1

    daa9553302aa53d54dfdaa5dada8fcb1f8f04a73

  • SHA256

    23b601a25a5fcc28f56f9d72145973fe8f830355c26f354094759eb010b40a42

  • SHA512

    21a0a4b985e6f8ba8a520cd6327e59ea241688abc041a5a8c0b4a5606041a2402d4734fe6980cc65b4e833c7b748c26a0bdaf113ecc422376a42502485656140

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      23b601a25a5fcc28f56f9d72145973fe8f830355c26f354094759eb010b40a42

    • Size

      2.4MB

    • MD5

      22925ae7ba90c2c0406abfb0ea7149c3

    • SHA1

      daa9553302aa53d54dfdaa5dada8fcb1f8f04a73

    • SHA256

      23b601a25a5fcc28f56f9d72145973fe8f830355c26f354094759eb010b40a42

    • SHA512

      21a0a4b985e6f8ba8a520cd6327e59ea241688abc041a5a8c0b4a5606041a2402d4734fe6980cc65b4e833c7b748c26a0bdaf113ecc422376a42502485656140

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks