General

  • Target

    1e60834a63d687a27aeaaf2d78c091e1847993d3ea7ab02ec61ffb89a24592de

  • Size

    24.4MB

  • Sample

    220521-bgzn7aehbq

  • MD5

    b2559cafd386f6761b222873b0fafd17

  • SHA1

    f4db5a6830bcb896e10be19ffcfe9e1f5066a4e5

  • SHA256

    1e60834a63d687a27aeaaf2d78c091e1847993d3ea7ab02ec61ffb89a24592de

  • SHA512

    a9c10efaa1c885c1d495cfb24f540d77b9e24d6ece662ef36485e60d203db29dd8ca22ab0c86902a231b5d2d50598bb92c3e067f7aa238fcf244b7b14fa68cc2

Malware Config

Targets

    • Target

      1e60834a63d687a27aeaaf2d78c091e1847993d3ea7ab02ec61ffb89a24592de

    • Size

      24.4MB

    • MD5

      b2559cafd386f6761b222873b0fafd17

    • SHA1

      f4db5a6830bcb896e10be19ffcfe9e1f5066a4e5

    • SHA256

      1e60834a63d687a27aeaaf2d78c091e1847993d3ea7ab02ec61ffb89a24592de

    • SHA512

      a9c10efaa1c885c1d495cfb24f540d77b9e24d6ece662ef36485e60d203db29dd8ca22ab0c86902a231b5d2d50598bb92c3e067f7aa238fcf244b7b14fa68cc2

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks