Overview

overview

10

Static

static

7

2e2ebdf2c4...db.apk

android_x86

10

2e2ebdf2c4...db.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e2ebdf2c4319164e3c927b18016721e12a947c78e1165296bd764c33d1a20db.apk

  • Size

    5.4MB

  • Sample

    220603-jpww9shbcr

  • MD5

    7654e5339693dd4286fbc84c62847b85

  • SHA1

    dd28585b7e51eb8d5cc9762f3dc31dc4e83b88e1

  • SHA256

    2e2ebdf2c4319164e3c927b18016721e12a947c78e1165296bd764c33d1a20db

  • SHA512

    72436ed3c55d374bb93931c44d257f088161ef9fc8a2a7fff4a2c4f8b164d9df16e554286050b935a39807d4d5d89bc9542fc4b59c6593c2438773391ec1ecd9

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      2e2ebdf2c4319164e3c927b18016721e12a947c78e1165296bd764c33d1a20db.apk

    • Size

      5.4MB

    • MD5

      7654e5339693dd4286fbc84c62847b85

    • SHA1

      dd28585b7e51eb8d5cc9762f3dc31dc4e83b88e1

    • SHA256

      2e2ebdf2c4319164e3c927b18016721e12a947c78e1165296bd764c33d1a20db

    • SHA512

      72436ed3c55d374bb93931c44d257f088161ef9fc8a2a7fff4a2c4f8b164d9df16e554286050b935a39807d4d5d89bc9542fc4b59c6593c2438773391ec1ecd9

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks