General

  • Target

    17cf20b7d24d78e28a5bd5497ce780673828ae95740fb6807b35175109a12f89

  • Size

    7.9MB

  • Sample

    220521-b3pfcache7

  • MD5

    7da58a306b7ff9bac0de718af6e8616d

  • SHA1

    5669788f1a771076c9be52433e402d46eb3c8376

  • SHA256

    17cf20b7d24d78e28a5bd5497ce780673828ae95740fb6807b35175109a12f89

  • SHA512

    ab78da96108e2efc28b34a5c1ee865f8f31ce5d296ca1ad14eb7291607f774652aff9877f048f5d38ff08c6d43069a6d60e5d91f2a9258587ae7bf1de40ad3c6

Malware Config

Targets

    • Target

      17cf20b7d24d78e28a5bd5497ce780673828ae95740fb6807b35175109a12f89

    • Size

      7.9MB

    • MD5

      7da58a306b7ff9bac0de718af6e8616d

    • SHA1

      5669788f1a771076c9be52433e402d46eb3c8376

    • SHA256

      17cf20b7d24d78e28a5bd5497ce780673828ae95740fb6807b35175109a12f89

    • SHA512

      ab78da96108e2efc28b34a5c1ee865f8f31ce5d296ca1ad14eb7291607f774652aff9877f048f5d38ff08c6d43069a6d60e5d91f2a9258587ae7bf1de40ad3c6

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks