General

  • Target

    8cdd6e72f3b86b583780af78d129d60846c66fe41bd3fe67a4ed2f8c840b2a07

  • Size

    2.5MB

  • Sample

    220516-cbzmnshed9

  • MD5

    19a426de1f4e93ec51437bad0095f54d

  • SHA1

    fd3c7476c456d3f218825a64eee21f43a19bf0f4

  • SHA256

    8cdd6e72f3b86b583780af78d129d60846c66fe41bd3fe67a4ed2f8c840b2a07

  • SHA512

    e56d37e3561669cf4df94d7290632bdeac3cfddad6da9406cb5e94d42a2bcb71021106d147808243f103d7353a81e39254b7cbebbfab15c433d1f3c3d030cdaa

Malware Config

Targets

    • Target

      8cdd6e72f3b86b583780af78d129d60846c66fe41bd3fe67a4ed2f8c840b2a07

    • Size

      2.5MB

    • MD5

      19a426de1f4e93ec51437bad0095f54d

    • SHA1

      fd3c7476c456d3f218825a64eee21f43a19bf0f4

    • SHA256

      8cdd6e72f3b86b583780af78d129d60846c66fe41bd3fe67a4ed2f8c840b2a07

    • SHA512

      e56d37e3561669cf4df94d7290632bdeac3cfddad6da9406cb5e94d42a2bcb71021106d147808243f103d7353a81e39254b7cbebbfab15c433d1f3c3d030cdaa

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks