General

  • Target

    3b9b2f751ade2c0dd2c6ac1676af5f047f513501d56a5b1909458360816b7bcd

  • Size

    2.5MB

  • Sample

    220521-b31hlschf7

  • MD5

    4d5f7fee3857add91dc6509e4752658b

  • SHA1

    82168bf32cce3aee78d511266ba10e311b5680d3

  • SHA256

    3b9b2f751ade2c0dd2c6ac1676af5f047f513501d56a5b1909458360816b7bcd

  • SHA512

    976d78f7b30957a227fdabf510fcb36b40a07e0f714d80e83a814cc3a0bd196893a10825b0094328fe2cbe79ab3aa73945d4cd3f05c157d2bf0aea6d8970dc75

Malware Config

Targets

    • Target

      3b9b2f751ade2c0dd2c6ac1676af5f047f513501d56a5b1909458360816b7bcd

    • Size

      2.5MB

    • MD5

      4d5f7fee3857add91dc6509e4752658b

    • SHA1

      82168bf32cce3aee78d511266ba10e311b5680d3

    • SHA256

      3b9b2f751ade2c0dd2c6ac1676af5f047f513501d56a5b1909458360816b7bcd

    • SHA512

      976d78f7b30957a227fdabf510fcb36b40a07e0f714d80e83a814cc3a0bd196893a10825b0094328fe2cbe79ab3aa73945d4cd3f05c157d2bf0aea6d8970dc75

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks