Overview

overview

10

Static

static

7

96f293ee1b...be.apk

android_x86

10

96f293ee1b...be.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96f293ee1be22f9d3459dfa7476cb46ac0716089261864905230702434806bbe

  • Size

    9.9MB

  • Sample

    220525-cdsbdabcel

  • MD5

    bb4c68c5f91b87c142c2a796e9a30339

  • SHA1

    d30350953f206eee7e55f635e9df97315ec963b4

  • SHA256

    96f293ee1be22f9d3459dfa7476cb46ac0716089261864905230702434806bbe

  • SHA512

    d66c10cba3d3ced96c5a7f896890a5392cce419e870fc3ee3fa5dc80ae75ef9a6574bfced8082eeff6f4b9b05adc20732c741fa4ce6478d3a25866a0aaa5d5ac

Score
10/10
agent_smithadwareandroidbankerevasionransomware

Malware Config

Targets

    • Target

      96f293ee1be22f9d3459dfa7476cb46ac0716089261864905230702434806bbe

    • Size

      9.9MB

    • MD5

      bb4c68c5f91b87c142c2a796e9a30339

    • SHA1

      d30350953f206eee7e55f635e9df97315ec963b4

    • SHA256

      96f293ee1be22f9d3459dfa7476cb46ac0716089261864905230702434806bbe

    • SHA512

      d66c10cba3d3ced96c5a7f896890a5392cce419e870fc3ee3fa5dc80ae75ef9a6574bfced8082eeff6f4b9b05adc20732c741fa4ce6478d3a25866a0aaa5d5ac

    Score
    10/10
    agent_smithadwarebankerevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks