Analysis

  • max time kernel
    873271s
  • max time network
    14s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    05-06-2022 13:13

General

  • Target

    a3e95b5774c3f4d0f742fbc61ec0b3536deba4388840a398a8ec9c3eb351a177.apk

  • Size

    4.0MB

  • MD5

    44bce3a306b0d706c0937a2445bc0743

  • SHA1

    902d91fe8790efe5a1cf76b963bbb63226ffd18a

  • SHA256

    a3e95b5774c3f4d0f742fbc61ec0b3536deba4388840a398a8ec9c3eb351a177

  • SHA512

    b8456ab455d8e6ec277fdb5e2d4951da4cd6899563d0aab7793297cb9684a93f733a3761b0ee21792fe3e6e759a2c381e78f0613f082338fe5aaefcd981afeae

Score
10/10

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

Processes

  • com.android.google.coreappx
    1⤵
      PID:5057

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.android.google.coreappx/app_crashrecord/1002
      Filesize

      235B

      MD5

      496edbf656185038f1d062d021ce5092

      SHA1

      59ada6747a55cc4715479b627c56946630c78adf

      SHA256

      b85e29473b6a2cb4e41802dc41c8cd366943e16b38e2d811c2c9e7a3a0490911

      SHA512

      ee0737976e55f98331a90901b47253d730e7ccaf67accb639e745354ba1185ddeae65026404f13e5b8621c51ebe99f6f0a8f065e4483f736ffba69f4d9dda9ad

    • /data/user/0/com.android.google.coreappx/app_crashrecord/1004
      Filesize

      235B

      MD5

      036bb164cbf7390a02fef57a2db1edfc

      SHA1

      5076d0a0fc84a337c7f4b92844f5bdb33692170f

      SHA256

      91f3d37ac968e347a44a5a38d368a25ba5e0c2ec3d47d21ff131bad8de8edcc0

      SHA512

      188fa34c2d02f5cce1d530fae4279c8c2582c68885358c37d047efa51b1db36e49014e305ecfc223323dbe34ff03ccb9026d1ef6ddc19600ff52f29e7b20e00d

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_-journal
      Filesize

      524B

      MD5

      f071916c67467d9a5c33078ffe8b5a93

      SHA1

      21fdd39707b53b2cecab1a9884726ae2ac5d0fe8

      SHA256

      3c1c699a3147fd32980622e05c20021cd219e13cfd9fff8112c3754775c32524

      SHA512

      31ef790b785e95bdf41d3f12fea5d05ab1630bdd4ca842d9a1fb974c34e5ef608315679b44309532e1777e66e9f49257e44be8e7fbbaa17980b1578409bcec55

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.android.google.coreappx/databases/bugly_db_-wal
      Filesize

      68KB

      MD5

      0d8e2849fcaa6ce3d4121d17b945f4bf

      SHA1

      3c48bf12779b7226f99e551df05cbc71f9597d40

      SHA256

      b47711fe2d9c32efd5ac05c8f3f3d84eac73f0de7583069ba494390dc96b819d

      SHA512

      f198c432fc8c058fdef4c11c2cc607aaa48c9f1bccf4b01c6a5776f9bf8e08e7f4d179c3de658e03c963046fb3b314a78248c18bb1363e8060ebef4a2b6f93af

    • /data/user/0/com.android.google.coreappx/shared_prefs/BUGLY_COMMON_VALUES.xml
      Filesize

      103B

      MD5

      ffbd4279dd2c5e747ff7a6a4407b5073

      SHA1

      58a0bb21c6d7c66a636c6b2c190d0b3db90db997

      SHA256

      ef6f212789b6bb61a578326525bcf920ebd86480442900f653973bc63f3b8e03

      SHA512

      465744752ed2c8a5eb53c520282fe3077c993086b6f410d873d8d6278d33d4161dad5d2de1d61c84ced7d910564e5470e5229b939583399cd25169602e786b62

    • /data/user/0/com.android.google.coreappx/shared_prefs/com.android.google.coreappx.BETA_VALUES.xml
      Filesize

      314B

      MD5

      9653752fd35b3a6b87f416f7dc5ae937

      SHA1

      f107e8925455fb89aa7f7f026a0e38f47f8c84cb

      SHA256

      2d46c79287cb7fd412b8b00a9ea265b2a60227f56d3f1a3eb38c051184cb2500

      SHA512

      7d837965a0d6d3429ad9198b7efa580bb3ce8a0d44a4e50e6729d5d00971ad0ec7a42b6fb3a4ee5dce68daf7bf2741ded382b923f201808041154abb1dc06bdb

    • /data/user/0/com.android.google.coreappx/shared_prefs/com.android.google.coreappx.BETA_VALUES.xml
      Filesize

      118B

      MD5

      a887ba8ba2f6852ca7b0226906adb4bb

      SHA1

      7817af445b1a55ee2d5c94e7bd8b3dc60bd0a6b7

      SHA256

      068456c8cf5f1d5658211bac28984998659e9c8441ad3989366a864504c61daa

      SHA512

      9a977d9985108fe986b1717b5edb9336018c8cb87f59ae1bd0fa3469635e0ddf8958b85180518478b9fb1649c729358bad6d6275de99306ec4865b4b01fb18b2

    • /data/user/0/com.android.google.coreappx/shared_prefs/crashrecord.xml
      Filesize

      139B

      MD5

      7c35b76d3baef7b19d229ef3c0df1e6a

      SHA1

      597a8ef469bb2eb7afb5d70927f29fed99cd31f3

      SHA256

      004f162bfabaff222daf814bd3e1872418f939489083eee8b9fae48f08050e5f

      SHA512

      5bfcf7c70a737065d085371063b4c7529192c358146c59918a5d8837c86511c31d3d5f0a416fc8e68f611a3eac57dcfb25d1c33b5cf705b98ae07bde9ece1680

    • /data/user/0/com.android.google.coreappx/shared_prefs/crashrecord.xml
      Filesize

      208B

      MD5

      dc3f33a30dee2fcb528324f90e24e736

      SHA1

      a7396e15e7f62a989a7c02595764a74bb5465e66

      SHA256

      ae4327d819c918d3c7dcd35e55118ace2a253be0529f03948d994d2bccc057cf

      SHA512

      bcc986291f4bc1593657a2216ff86281664cd7c1b52f90645282c6e85f612e87e42b4ab882387135a5d0df2e4b16f01021d0a28444f81d89d2becab1181d4b26

    • /data/user/0/com.android.google.coreappx/shared_prefs/multidex.version.xml
      Filesize

      156B

      MD5

      a106af851b312ac00b0202d2849363de

      SHA1

      c3da16d5c738fddc79474a6732e94d628dd45b3a

      SHA256

      f0ceec359d106dd74a48445fbf886ca4be98dcbb6cad8efd2ca60a1026de8776

      SHA512

      40af40c126e352670f71ddfffb818cab39fbeda836fa7032018e8ce46e65b8ccc4ceafa21aa853b5501f718babc3e1caa38a018dbd4eff19388126ec33334c46