Analysis

  • max time kernel
    683339s
  • max time network
    13s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    03-06-2022 07:55

General

  • Target

    a3e95b5774c3f4d0f742fbc61ec0b3536deba4388840a398a8ec9c3eb351a177.apk

  • Size

    4.0MB

  • MD5

    44bce3a306b0d706c0937a2445bc0743

  • SHA1

    902d91fe8790efe5a1cf76b963bbb63226ffd18a

  • SHA256

    a3e95b5774c3f4d0f742fbc61ec0b3536deba4388840a398a8ec9c3eb351a177

  • SHA512

    b8456ab455d8e6ec277fdb5e2d4951da4cd6899563d0aab7793297cb9684a93f733a3761b0ee21792fe3e6e759a2c381e78f0613f082338fe5aaefcd981afeae

Score
10/10

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

Processes

  • com.android.google.coreappx
    1⤵
      PID:5106

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.android.google.coreappx/app_crashrecord/1002
      Filesize

      235B

      MD5

      56cd040037bda34b26b4095a43dff6e9

      SHA1

      2f8bdbd319da74fa25cdb269ea8b34a43906fabd

      SHA256

      078d1e68c6050050d9132f947348c7e6a0dc982ecba27d37de896bdd14428acb

      SHA512

      e71634ef1915d317fffd6678f1f6ac4a67c6371894d73da31423a1af3834e95b2b62d0d97634afa7f3412845eca705ed86573d5aad99aa1942ef2c01da84be67

    • /data/user/0/com.android.google.coreappx/app_crashrecord/1004
      Filesize

      235B

      MD5

      b3ffb82b5fb20b322ede9f4d8337ad22

      SHA1

      b67cf7d9b29670a2c3258fb589181a2a964455ec

      SHA256

      30004377ffc0007c1bcd58a9002ac2f0e671f6f6e2498076ad3c79e80e0c2c41

      SHA512

      0353576d28ec758d7bab04958f0a870943f3d4f533b2af8b191199f5ec1f44e61b8e58834daa66fd339081eecc55234346ca72572f745d25ea39f785d6862c7f

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_-journal
      Filesize

      524B

      MD5

      030a922b2ad915a1c341817b902f624a

      SHA1

      a07e76787606c226e614c6d5ca7017ff7ac7fa24

      SHA256

      4747c3f539ad1a9231206bfd48c198ac43825d33c8eedd1c50fe2e673b714781

      SHA512

      c82da63129edfc363645811171413b5dd92dc44822d9d557c99d3d1a4b9d448bc657dc394fe0bdc484a49e219ea63f57a43814fd357cc0d08077c2cce103b7f5

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_-wal
      Filesize

      68KB

      MD5

      e39ad8b9f77287cdd74f57a4bab9e2c7

      SHA1

      0c9409b7cd974be33d8489b065d408f82ea0c1bd

      SHA256

      e5d26ae0c1317841efc6f7e3fdd3addd7face28ecbd212345682d3025410f389

      SHA512

      eaa303bb74c2b033ccc715d9c8af0c6514aed00e8a2fda3528efdd6a68481da4eab8cf55a3dc9b0fa012bf686d0940d116c8a3afcbba9acef9163cf40253abce

    • /data/user/0/com.android.google.coreappx/files/.MultiDex/adsdk.zip
      Filesize

      607KB

      MD5

      348d61335ce9a5660103fbb95dcc4b18

      SHA1

      605c6d9eb4f2f54b3e001a332bc88530540455ff

      SHA256

      47c933db74d4ec6bd892d1283b5edd55e6707184d4560639ca97ddefeab8edb8

      SHA512

      9081f4fa0b986a602e0e3677fa2218654b08fab1966a3e814b0133273f1e3fdf60e1c2c0b14d92052e968fa4063b5af5a700aaf6167b0b378d2f318cdddcf70d

    • /data/user/0/com.android.google.coreappx/shared_prefs/BUGLY_COMMON_VALUES.xml
      Filesize

      103B

      MD5

      ffbd4279dd2c5e747ff7a6a4407b5073

      SHA1

      58a0bb21c6d7c66a636c6b2c190d0b3db90db997

      SHA256

      ef6f212789b6bb61a578326525bcf920ebd86480442900f653973bc63f3b8e03

      SHA512

      465744752ed2c8a5eb53c520282fe3077c993086b6f410d873d8d6278d33d4161dad5d2de1d61c84ced7d910564e5470e5229b939583399cd25169602e786b62

    • /data/user/0/com.android.google.coreappx/shared_prefs/com.android.google.coreappx.BETA_VALUES.xml
      Filesize

      314B

      MD5

      9653752fd35b3a6b87f416f7dc5ae937

      SHA1

      f107e8925455fb89aa7f7f026a0e38f47f8c84cb

      SHA256

      2d46c79287cb7fd412b8b00a9ea265b2a60227f56d3f1a3eb38c051184cb2500

      SHA512

      7d837965a0d6d3429ad9198b7efa580bb3ce8a0d44a4e50e6729d5d00971ad0ec7a42b6fb3a4ee5dce68daf7bf2741ded382b923f201808041154abb1dc06bdb

    • /data/user/0/com.android.google.coreappx/shared_prefs/com.android.google.coreappx.BETA_VALUES.xml
      Filesize

      118B

      MD5

      a887ba8ba2f6852ca7b0226906adb4bb

      SHA1

      7817af445b1a55ee2d5c94e7bd8b3dc60bd0a6b7

      SHA256

      068456c8cf5f1d5658211bac28984998659e9c8441ad3989366a864504c61daa

      SHA512

      9a977d9985108fe986b1717b5edb9336018c8cb87f59ae1bd0fa3469635e0ddf8958b85180518478b9fb1649c729358bad6d6275de99306ec4865b4b01fb18b2

    • /data/user/0/com.android.google.coreappx/shared_prefs/crashrecord.xml
      Filesize

      139B

      MD5

      7c35b76d3baef7b19d229ef3c0df1e6a

      SHA1

      597a8ef469bb2eb7afb5d70927f29fed99cd31f3

      SHA256

      004f162bfabaff222daf814bd3e1872418f939489083eee8b9fae48f08050e5f

      SHA512

      5bfcf7c70a737065d085371063b4c7529192c358146c59918a5d8837c86511c31d3d5f0a416fc8e68f611a3eac57dcfb25d1c33b5cf705b98ae07bde9ece1680

    • /data/user/0/com.android.google.coreappx/shared_prefs/crashrecord.xml
      Filesize

      208B

      MD5

      dc3f33a30dee2fcb528324f90e24e736

      SHA1

      a7396e15e7f62a989a7c02595764a74bb5465e66

      SHA256

      ae4327d819c918d3c7dcd35e55118ace2a253be0529f03948d994d2bccc057cf

      SHA512

      bcc986291f4bc1593657a2216ff86281664cd7c1b52f90645282c6e85f612e87e42b4ab882387135a5d0df2e4b16f01021d0a28444f81d89d2becab1181d4b26

    • /data/user/0/com.android.google.coreappx/shared_prefs/multidex.version.xml
      Filesize

      156B

      MD5

      a106af851b312ac00b0202d2849363de

      SHA1

      c3da16d5c738fddc79474a6732e94d628dd45b3a

      SHA256

      f0ceec359d106dd74a48445fbf886ca4be98dcbb6cad8efd2ca60a1026de8776

      SHA512

      40af40c126e352670f71ddfffb818cab39fbeda836fa7032018e8ce46e65b8ccc4ceafa21aa853b5501f718babc3e1caa38a018dbd4eff19388126ec33334c46