General

  • Target

    8c371635eedca3554bd3c090b87721f354d995c5a2f35525b2a6f682e19bfa93

  • Size

    5.9MB

  • Sample

    220524-rntdrahffr

  • MD5

    c8c1b29f55213e72f034e085b18de85e

  • SHA1

    4ecaec4436fa9f66771e2f38f447cad32f3aecba

  • SHA256

    8c371635eedca3554bd3c090b87721f354d995c5a2f35525b2a6f682e19bfa93

  • SHA512

    ce07ec61fb8009688067ef0087428ff41505810c1c3c63e7211df4f333ca2aa5fa40e54bf5574a21d3c959c16c5d4b65f37e98df864438e994dd4520af520834

Malware Config

Targets

    • Target

      8c371635eedca3554bd3c090b87721f354d995c5a2f35525b2a6f682e19bfa93

    • Size

      5.9MB

    • MD5

      c8c1b29f55213e72f034e085b18de85e

    • SHA1

      4ecaec4436fa9f66771e2f38f447cad32f3aecba

    • SHA256

      8c371635eedca3554bd3c090b87721f354d995c5a2f35525b2a6f682e19bfa93

    • SHA512

      ce07ec61fb8009688067ef0087428ff41505810c1c3c63e7211df4f333ca2aa5fa40e54bf5574a21d3c959c16c5d4b65f37e98df864438e994dd4520af520834

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks