General

  • Target

    feec0326f70fa8f97a42a1b5a8584423138d7dec830994be73608ada4bee5c8b

  • Size

    973KB

  • Sample

    220516-rbp6kagabn

  • MD5

    d2107cc5cb0b0c4ea4a431bad4b69d4d

  • SHA1

    75df3a748c30e7706fbc3871f098cf98347c83e6

  • SHA256

    feec0326f70fa8f97a42a1b5a8584423138d7dec830994be73608ada4bee5c8b

  • SHA512

    c93e3d8e88f420a16c0b0bb689540dd3daffa1ac7a4bd044d55d9f241ab1a9fae6c96ee35b5b86ec7142375b0ee53426d422ea08ca25e2534191476f45842b93

Malware Config

Targets

    • Target

      feec0326f70fa8f97a42a1b5a8584423138d7dec830994be73608ada4bee5c8b

    • Size

      973KB

    • MD5

      d2107cc5cb0b0c4ea4a431bad4b69d4d

    • SHA1

      75df3a748c30e7706fbc3871f098cf98347c83e6

    • SHA256

      feec0326f70fa8f97a42a1b5a8584423138d7dec830994be73608ada4bee5c8b

    • SHA512

      c93e3d8e88f420a16c0b0bb689540dd3daffa1ac7a4bd044d55d9f241ab1a9fae6c96ee35b5b86ec7142375b0ee53426d422ea08ca25e2534191476f45842b93

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks