General

  • Target

    33e28f8b374513ea8873e670c069f66a6f1db5adc24adcf5980e0d9c92c49d68

  • Size

    18.8MB

  • Sample

    220625-l5fakaaag7

  • MD5

    5d92f285b1745c423fb670abd8dee187

  • SHA1

    181b845e202e4131a70395b15abea5c16ac489c7

  • SHA256

    33e28f8b374513ea8873e670c069f66a6f1db5adc24adcf5980e0d9c92c49d68

  • SHA512

    9a54e83679ec76663da1a249aa0dafe8e83a78082eb0e047773997c3ca4fefd60eb03a3058debeff26a146971d9ba256aced65e171eee6f7624065068c7552c2

Malware Config

Targets

    • Target

      33e28f8b374513ea8873e670c069f66a6f1db5adc24adcf5980e0d9c92c49d68

    • Size

      18.8MB

    • MD5

      5d92f285b1745c423fb670abd8dee187

    • SHA1

      181b845e202e4131a70395b15abea5c16ac489c7

    • SHA256

      33e28f8b374513ea8873e670c069f66a6f1db5adc24adcf5980e0d9c92c49d68

    • SHA512

      9a54e83679ec76663da1a249aa0dafe8e83a78082eb0e047773997c3ca4fefd60eb03a3058debeff26a146971d9ba256aced65e171eee6f7624065068c7552c2

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks