General

  • Target

    f1bc8fbdf3f2a0d79e917d6329c68bc977082ae223dcb1e72e0a7f323c71e07f

  • Size

    2.5MB

  • Sample

    220630-xvp8kabag2

  • MD5

    72cee9daf9fca791d55e34ae7d2e9cc8

  • SHA1

    6a049afd36c598b545e58ae1d3a900307197e676

  • SHA256

    f1bc8fbdf3f2a0d79e917d6329c68bc977082ae223dcb1e72e0a7f323c71e07f

  • SHA512

    2028b353832f4cfd7205061dd0ea017605e6ddaa193f315e98772839f62d103214a75e2fb03b7e3fc31395841e7fe025bc5cc77ef25c902fe17107f99d60147c

Malware Config

Targets

    • Target

      f1bc8fbdf3f2a0d79e917d6329c68bc977082ae223dcb1e72e0a7f323c71e07f

    • Size

      2.5MB

    • MD5

      72cee9daf9fca791d55e34ae7d2e9cc8

    • SHA1

      6a049afd36c598b545e58ae1d3a900307197e676

    • SHA256

      f1bc8fbdf3f2a0d79e917d6329c68bc977082ae223dcb1e72e0a7f323c71e07f

    • SHA512

      2028b353832f4cfd7205061dd0ea017605e6ddaa193f315e98772839f62d103214a75e2fb03b7e3fc31395841e7fe025bc5cc77ef25c902fe17107f99d60147c

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks