Overview

overview

10

Static

static

7

432a188b6e...a5.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    432a188b6eae863631ad9c8a59bcc123aaae857f43ce4ee9b601429e60dac6a5

  • Size

    2.6MB

  • Sample

    220521-b3zlbachf6

  • MD5

    8fadde0b1126da724f5957fc62b49cf8

  • SHA1

    b0cfb644a31d689887fbef54ed2a725d38937297

  • SHA256

    432a188b6eae863631ad9c8a59bcc123aaae857f43ce4ee9b601429e60dac6a5

  • SHA512

    26233bd6a5cd8f7be60ddd5e0e720fa9c455f6e80ea8fa63bea5e3674b7c7dd0991260f7a8c5ea0c26bb0241f67cecece2b623d874d70b71d0e309d25b12bb93

Score
10/10
agent_smithadwareandroidransomware

Malware Config

Targets

    • Target

      432a188b6eae863631ad9c8a59bcc123aaae857f43ce4ee9b601429e60dac6a5

    • Size

      2.6MB

    • MD5

      8fadde0b1126da724f5957fc62b49cf8

    • SHA1

      b0cfb644a31d689887fbef54ed2a725d38937297

    • SHA256

      432a188b6eae863631ad9c8a59bcc123aaae857f43ce4ee9b601429e60dac6a5

    • SHA512

      26233bd6a5cd8f7be60ddd5e0e720fa9c455f6e80ea8fa63bea5e3674b7c7dd0991260f7a8c5ea0c26bb0241f67cecece2b623d874d70b71d0e309d25b12bb93

    Score
    10/10
    agent_smithadwareransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks