agent_smith | 1994e804f76d198911611808d1a4da874e68cd6ee191381d4fdb7faffc1f4d58

Analysis

max time kernel
3052528s
max time network
15s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
30-06-2022 18:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1994e804f76d198911611808d1a4da874e68cd6ee191381d4fdb7faffc1f4d58.apk
Size

2.6MB
MD5

cdc5794b20b41af047f7b82e1a10ce5c
SHA1

592d624d9733d22b8c61887ce039cdd601c37eed
SHA256

1994e804f76d198911611808d1a4da874e68cd6ee191381d4fdb7faffc1f4d58
SHA512

540f70adac3d030501b82aa9a7adee537a8505a885478b5ebb2d01226ed2f7dcdf4c4d247a5819c53d62b6491d5cdd20a44506839200b31d464920a3f508b23f

Score

10^/10

agent_smith adware evasion

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

com.sdfll.uuyhjjhh

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.sdfll.uuyhjjhh

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.sdfll.uuyhjjhh

com.sdfll.uuyhjjhh
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:4053

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.sdfll.uuyhjjhh/app_jar/lpdf.jar
Filesize
35KB

MD5
e1ab911d4b585a26aae02d8540575013

SHA1
ac148f7bdf95edddc97d9224ff51a771f1070520

SHA256
8a71fab57b4a03f0b37095daa2eaa086ec6ed6c1c6166ca67c0e0a9e14cc85ca

SHA512
983ec12cde3cbfaffb414b8c8eb17c793bee558eb51b9d5e630f9bd5f312e0ce55622719aad6097a799286c25001212b26d7053e7e110a4918beace33d3bcbc4

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_jar/lpdf.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_jar/oat/x86/lpdf.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_jar/oat/x86/lpdf.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/Web Data-journal
Filesize
1KB

MD5
eb66a4743929b884de6f8fec98f60ed6

SHA1
a2921abfe6caa9b0fd1f3929510471987ca07ab0

SHA256
e1aef1fffd338f251d838460c80c6f226cc7e998a1aa119b72fd606f1af78ad0

SHA512
12a5e963cd5867b6664a200b64cf30b3a83a42700b5a799b427b8c342c816c64c0671b6d3ac2d2ff0dede15cb344892155e74090f900be5b40978b1ec6f23533

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/metrics_guid
Filesize
36B

MD5
09854fc348a79186171b242b2a2357cf

SHA1
7dbd0018dbc623867f86444dfcda2ce7296c9ee2

SHA256
f89cb32aa724413ffaa315d17c1a5ee893483e0c1b15db7230b70a9f5d34b8ba

SHA512
57da023d78cd0dd06c18c5fa19ed7dd706dabf7be38a09a2dee4637665ea4167e56f7b80acb7313e4507b942bab7d226f66784be6decf6f80faf06fa731b833f

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/XinZF.xml
Filesize
125B

MD5
237ae82ee89a2accf57cc2d78879094a

SHA1
0c2efe5d38dbb74625568265c72e3b624091bd57

SHA256
7c593841a5a94cb2e7e8b6b991eb936fbbb90cd68b02fb38795c1c24779dfff4

SHA512
414228ca69a9556e7ea86e3f0d9d1026479b72aa3ae9a3977f20dcdf489a1c25e61b4fc510eb54e0a7472985a309b472744190ee86b730cc08cd00e1ebb0ff08

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/XinZF_conf.xml
Filesize
122B

MD5
76a516ec620e2508e512a673a58347a3

SHA1
386e9ee5d38602ebdca74bc24b24d75b1a765e8c

SHA256
245368df69958cb3da7feaea45e63731daf36a8954e5982bc36ed91eb439c6b5

SHA512
e4e96e50d4119fb2ba9d28b997b4991cf5e14ea7ea43c25304c3a40850a7744491f25e2ee0c7e500bc02e203669ff1cdee302f96534960bbcca3760ff8d192a8

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/XinZF_conf.xml
Filesize
169B

MD5
f80fabff14e5bdf92b9390a203b00a66

SHA1
a5341c525d9939678655821ed10314e3eb50a17f

SHA256
196fc25ed3a7364a648f3cbf8635e8bfdba303f7524ced675d96d012176d4a54

SHA512
6ff977f1204bcf6002f49f49467758a8a1b1ca53f4486909068fc2a0fcfdba49502e5a96ec3ed940b7600f656fc54b07399ede0413aa7a04c9e5398df51b3b6c

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/XinZF_conf.xml
Filesize
208B

MD5
35f7dbb29dd4d8a7db21c03de18d865d

SHA1
90c35ff75305623e73597edfe8725d478902cdf7

SHA256
3d9b1a43e4a9ac8275e54c33e8268295ac7326d683c64cc8fb3a137d1e6b236d

SHA512
d2dc15e29172192fe8d62e75b2a43f7b8995d49d986a8850a8ffcc3fd8e64f501b3d42430a994102c1f96d279167c9a9f967e2407c23c7facc8860749ee860a5

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/umeng_common_config.xml
Filesize
111B

MD5
000df93682f1231235dd44dc04ad7a32

SHA1
862ece196a5f3a6ccc9b2869a476a8c8633bff43

SHA256
d2e62a25212c717a8170a523e01dc36184646058e4983d6d224283c92892af85

SHA512
39baca8073409bf5c21a92d4654753ae7cf6f280c23003c5f2006a7957377b08eadbf901cab1821d4cec27ff0f7a637385771769c7a279aad57867e889a56257

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/umeng_common_config.xml
Filesize
171B

MD5
c440f954d45a73564b7ddedc0333dcd8

SHA1
20f4b44ea32d091ec99e715776d81ba13bf93573

SHA256
566044b1628ae56691495ff176ea6dd1ba0549bc6af17220fa70b6bc6a0349a0

SHA512
9d96941b7932754370fe3ed20d204cc42e685c70253ec2bdcc32b84cdc50f261e36ce1a7c9b34fdb7c868041e8c6bf609526df3c76b0f3fce93f677490c77363

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/umeng_common_config.xml
Filesize
236B

MD5
767232c9cb06b28b67e6bf98723c585e

SHA1
30fd6a64a737b6fcd1f654a2e7480c52cafb1fda

SHA256
03ad99ec1c41797590675312260b827e4f0e64ae8b94d9bae66bbc26582693b0

SHA512
0c7e612209aa2d177b9fcef9c73b7c0cb90fdba9e046739070f9f981b064f4e9699cd6f5d8271747ce69b9941bfa076caa7beea6e8da337d43f964554a90a714

Download Submit
/data/user/0/com.sdfll.uuyhjjhh/shared_prefs/umeng_common_location.xml
Filesize
390B

MD5
67f729dc77a3c4c773e2c2e6660ab8cd

SHA1
9122cf56e4985a4c1c494159648f398055224dd2

SHA256
3c3207eba967d3afbfbf4d6bfb76215691c8cf70d960071af690894a2b4936fc

SHA512
94a613cd51657e766ce670c34868f3127b76adfd54c23e63b0b34e0f36313f092da282abd2e111b70f6f91671f6beded77fcdbf04bfc4e8e6d93ebe6dd015903

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads