General

  • Target

    508c5e426b28967fe58a9e257843df59ad8dfecc480f0f72a281505c0f555cbd

  • Size

    20.6MB

  • Sample

    220524-2scxnsagb9

  • MD5

    db6e4ee1e9160c44332c8017ff96f651

  • SHA1

    7e7eb8596d00eb792d286ee93c8a2057b0941ae7

  • SHA256

    508c5e426b28967fe58a9e257843df59ad8dfecc480f0f72a281505c0f555cbd

  • SHA512

    014a9f70d1d756005b1ae88fe0fd2edfb223d96e61999e58746c3b999ec6013c144e1462ad26398eba10372c362fa3d7c8bedfb875c0520b0945baf45532d0ef

Malware Config

Targets

    • Target

      508c5e426b28967fe58a9e257843df59ad8dfecc480f0f72a281505c0f555cbd

    • Size

      20.6MB

    • MD5

      db6e4ee1e9160c44332c8017ff96f651

    • SHA1

      7e7eb8596d00eb792d286ee93c8a2057b0941ae7

    • SHA256

      508c5e426b28967fe58a9e257843df59ad8dfecc480f0f72a281505c0f555cbd

    • SHA512

      014a9f70d1d756005b1ae88fe0fd2edfb223d96e61999e58746c3b999ec6013c144e1462ad26398eba10372c362fa3d7c8bedfb875c0520b0945baf45532d0ef

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks