General

  • Target

    4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0

  • Size

    10.2MB

  • Sample

    220525-asmckaghek

  • MD5

    fef1abe663b0955779099437457b7f11

  • SHA1

    14a3046f9d9cbc14459c70e3c4f9cdaed7824fa5

  • SHA256

    4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0

  • SHA512

    cbb4d8f85355fc0b0edab65f71e0e8258b507decdf5b370de48fd006364612c21de27f14ae4215f018df769d38d53dfee7e5765dfbf1ccc6ee99bba7790a8123

Malware Config

Targets

    • Target

      4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0

    • Size

      10.2MB

    • MD5

      fef1abe663b0955779099437457b7f11

    • SHA1

      14a3046f9d9cbc14459c70e3c4f9cdaed7824fa5

    • SHA256

      4802cb155edd3a967499e28de63ed3adf0be7fc6a8a45a1307f6e815767851f0

    • SHA512

      cbb4d8f85355fc0b0edab65f71e0e8258b507decdf5b370de48fd006364612c21de27f14ae4215f018df769d38d53dfee7e5765dfbf1ccc6ee99bba7790a8123

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks