General

  • Target

    44710fe018450f47310c7ab69654201de8a72253ee564ab11f12e733a88bea7f

  • Size

    2.5MB

  • Sample

    220515-1rhk4abbaj

  • MD5

    69aea2e544b21e5650d6063afbf24d11

  • SHA1

    3a7fc7497f0a3551368b46a3a279a4df8db551ec

  • SHA256

    44710fe018450f47310c7ab69654201de8a72253ee564ab11f12e733a88bea7f

  • SHA512

    610d4c420879dba20d31ae130cf2cbafbdf9cdbeddf1699700a4ec81c67acffcef48231b87b9d982c1d6773465d4bf2b9e8cda80d65a41579ac9137025c1dc6e

Malware Config

Targets

    • Target

      44710fe018450f47310c7ab69654201de8a72253ee564ab11f12e733a88bea7f

    • Size

      2.5MB

    • MD5

      69aea2e544b21e5650d6063afbf24d11

    • SHA1

      3a7fc7497f0a3551368b46a3a279a4df8db551ec

    • SHA256

      44710fe018450f47310c7ab69654201de8a72253ee564ab11f12e733a88bea7f

    • SHA512

      610d4c420879dba20d31ae130cf2cbafbdf9cdbeddf1699700a4ec81c67acffcef48231b87b9d982c1d6773465d4bf2b9e8cda80d65a41579ac9137025c1dc6e

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks