Description
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
92dcc36e31b8d743d53be8e25e20e0c87697f85a3f067f6e42f88a0c5ee093f1
General
Target
Size
Sample
92dcc36e31b8d743d53be8e25e20e0c87697f85a3f067f6e42f88a0c5ee093f1
15MB
220515-1v1wvabccj
Score
10 /10
MD5
SHA1
SHA256
SHA512
905af64ac8dafb6656a968900fd26677
5a93ae750945b5fddf2509a0f143c93e006c1636
92dcc36e31b8d743d53be8e25e20e0c87697f85a3f067f6e42f88a0c5ee093f1
e73f2cc1a87c8b55513d86220ba39b9bb3606eaa15fa3e0fd5587efbca8806e9faf9d8e92885f17d4db14d968ef2b08490dd6c6bafea90fdd95d70efa091acd8
Malware Config
Targets
Target
MD5
Filesize
92dcc36e31b8d743d53be8e25e20e0c87697f85a3f067f6e42f88a0c5ee093f1
905af64ac8dafb6656a968900fd26677
15MB
Score
10/10
SHA1
SHA256
SHA512
5a93ae750945b5fddf2509a0f143c93e006c1636
92dcc36e31b8d743d53be8e25e20e0c87697f85a3f067f6e42f88a0c5ee093f1
e73f2cc1a87c8b55513d86220ba39b9bb3606eaa15fa3e0fd5587efbca8806e9faf9d8e92885f17d4db14d968ef2b08490dd6c6bafea90fdd95d70efa091acd8
Tags
Signatures
-
Agent smith
-
Requests cell location
Description
Uses Android APIs to to get current cell location.
-
Loads dropped Dex/Jar
Description
Runs executable file dropped to the device during analysis.
-
Requests dangerous framework permissions
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data).
Tags
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks