Overview

overview

10

Static

static

7

4bc4bfa4eb...56.apk

android_x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bc4bfa4eb5cba0d296a86b0500828da38fb569a777d64e4fa7a9fd17ce54356

  • Size

    23.7MB

  • Sample

    220625-max3kaadb7

  • MD5

    9243a15f61f91fac7727ec32b6e9308a

  • SHA1

    3ba0f5d2859acc57105b9999395c548a4766c888

  • SHA256

    4bc4bfa4eb5cba0d296a86b0500828da38fb569a777d64e4fa7a9fd17ce54356

  • SHA512

    baf31f51f3fd1e2fc46a40acc95b08207a63ee0687220e37eb8931ed09c3c0d45616829c7e6ce03a9dbcb2e7dc6332739ccfe8de397fdc9aa8831fb5ba733dae

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      4bc4bfa4eb5cba0d296a86b0500828da38fb569a777d64e4fa7a9fd17ce54356

    • Size

      23.7MB

    • MD5

      9243a15f61f91fac7727ec32b6e9308a

    • SHA1

      3ba0f5d2859acc57105b9999395c548a4766c888

    • SHA256

      4bc4bfa4eb5cba0d296a86b0500828da38fb569a777d64e4fa7a9fd17ce54356

    • SHA512

      baf31f51f3fd1e2fc46a40acc95b08207a63ee0687220e37eb8931ed09c3c0d45616829c7e6ce03a9dbcb2e7dc6332739ccfe8de397fdc9aa8831fb5ba733dae

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks