Overview

overview

10

Static

static

7

164a3ace3e...f9.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    164a3ace3e2f6152b789679efceb87668c29ed27f510db732722c952de2a9af9

  • Size

    14.7MB

  • Sample

    220516-caal6abegl

  • MD5

    01edca7549e02e9cc1a1c6ad98478a37

  • SHA1

    5d9170b58eed6d1dd3f737e90a50d53fe2dbf548

  • SHA256

    164a3ace3e2f6152b789679efceb87668c29ed27f510db732722c952de2a9af9

  • SHA512

    04be6be3bec6bc2bed8d5edc35e6d7d500d1c6f4bf538b6bf79be0f601e7548f2b0c90178ea4dca7dd50bf44d20dbc176f0d1f023bc7f8382505edfc4a04008e

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      164a3ace3e2f6152b789679efceb87668c29ed27f510db732722c952de2a9af9

    • Size

      14.7MB

    • MD5

      01edca7549e02e9cc1a1c6ad98478a37

    • SHA1

      5d9170b58eed6d1dd3f737e90a50d53fe2dbf548

    • SHA256

      164a3ace3e2f6152b789679efceb87668c29ed27f510db732722c952de2a9af9

    • SHA512

      04be6be3bec6bc2bed8d5edc35e6d7d500d1c6f4bf538b6bf79be0f601e7548f2b0c90178ea4dca7dd50bf44d20dbc176f0d1f023bc7f8382505edfc4a04008e

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks