Overview

overview

10

Static

static

7

37e4761fe0...0c.apk

android_x86

10

37e4761fe0...0c.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37e4761fe0955199cf990ed14ecf686b623b0be6115dcca4ed6eeed69acb490c

  • Size

    5.2MB

  • Sample

    220612-kvkxmaecbm

  • MD5

    2155bdd6c6a96cb4a60f6ea349880bc8

  • SHA1

    45bc8e5985add67ba8a0f6bbdac191b82d04f72e

  • SHA256

    37e4761fe0955199cf990ed14ecf686b623b0be6115dcca4ed6eeed69acb490c

  • SHA512

    5782a67ab961af107b80e9c5956c1f2664a50abb0e9df66aaf1b499ec94f3d0229041ac79b3d57461cc84c1186e9975dc96714a99caf1c55e9adf89b1d706ff7

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      37e4761fe0955199cf990ed14ecf686b623b0be6115dcca4ed6eeed69acb490c

    • Size

      5.2MB

    • MD5

      2155bdd6c6a96cb4a60f6ea349880bc8

    • SHA1

      45bc8e5985add67ba8a0f6bbdac191b82d04f72e

    • SHA256

      37e4761fe0955199cf990ed14ecf686b623b0be6115dcca4ed6eeed69acb490c

    • SHA512

      5782a67ab961af107b80e9c5956c1f2664a50abb0e9df66aaf1b499ec94f3d0229041ac79b3d57461cc84c1186e9975dc96714a99caf1c55e9adf89b1d706ff7

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries the unique device ID (IMEI, MEID, IMSI).

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks