Resubmissions

25-06-2022 02:20

220625-csgs7acfh4 10

General

  • Target

    479d533ad9ea5a708430537a21edd54d7d522cef4501b57ee0ae2bbcd655564e

  • Size

    1021KB

  • Sample

    220625-csgs7acfh4

  • MD5

    8fead45331f17e4bc7ca7fee22014f73

  • SHA1

    7dbe16d4939e4346f8d28c89b3d770ee66a29100

  • SHA256

    479d533ad9ea5a708430537a21edd54d7d522cef4501b57ee0ae2bbcd655564e

  • SHA512

    b71c718049b0a5bfe97d61c082fcd7edf272533d1b2340a76bdb06ea808f7e784777a517775f75fd15e43218eeebc568320d271dec9123154092aff9f17ac1ad

Malware Config

Targets

    • Target

      479d533ad9ea5a708430537a21edd54d7d522cef4501b57ee0ae2bbcd655564e

    • Size

      1021KB

    • MD5

      8fead45331f17e4bc7ca7fee22014f73

    • SHA1

      7dbe16d4939e4346f8d28c89b3d770ee66a29100

    • SHA256

      479d533ad9ea5a708430537a21edd54d7d522cef4501b57ee0ae2bbcd655564e

    • SHA512

      b71c718049b0a5bfe97d61c082fcd7edf272533d1b2340a76bdb06ea808f7e784777a517775f75fd15e43218eeebc568320d271dec9123154092aff9f17ac1ad

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the unique device ID (IMEI, MEID, IMSI).

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks