Overview

overview

10

Static

static

7

6ebc642554...5a.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ebc6425548e96e6389f08e33348117a319aad86bef44f10452c1d572459bc5a

  • Size

    27.1MB

  • Sample

    220524-vdaensdhbq

  • MD5

    2d5bcd8301be9624bce54b471848bdd8

  • SHA1

    dae7d6b57435f0fad1956d7b9093e27309ce1e73

  • SHA256

    6ebc6425548e96e6389f08e33348117a319aad86bef44f10452c1d572459bc5a

  • SHA512

    9fcb4214c6065b8a1cf309b6eb4ee9f226e8753a9f45d0e3598dc40022f9f590e59cc3517b0d2b833cbc9ce1d065b15f9e01c8e92bf6d860d1ad8be99d04c572

Score
10/10
agent_smithadwareandroidransomware

Malware Config

Targets

    • Target

      6ebc6425548e96e6389f08e33348117a319aad86bef44f10452c1d572459bc5a

    • Size

      27.1MB

    • MD5

      2d5bcd8301be9624bce54b471848bdd8

    • SHA1

      dae7d6b57435f0fad1956d7b9093e27309ce1e73

    • SHA256

      6ebc6425548e96e6389f08e33348117a319aad86bef44f10452c1d572459bc5a

    • SHA512

      9fcb4214c6065b8a1cf309b6eb4ee9f226e8753a9f45d0e3598dc40022f9f590e59cc3517b0d2b833cbc9ce1d065b15f9e01c8e92bf6d860d1ad8be99d04c572

    Score
    10/10
    agent_smithadwareransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks