General

  • Target

    28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb

  • Size

    2.2MB

  • Sample

    220708-km899abhc8

  • MD5

    7b498e695056b304c6cea22dccfa3048

  • SHA1

    189962ecb9c3bef7e33331057ad106310228dccf

  • SHA256

    28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb

  • SHA512

    58d9f2d0cc6ae9e84ecd7931022ef2d74d84c76e408a459ca0b62fd956ff1035ee4deb897e14342b7b4442b8c9b6cb1c25a6d1c817507578dd03f0110ef18f4e

Malware Config

Targets

    • Target

      28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb

    • Size

      2.2MB

    • MD5

      7b498e695056b304c6cea22dccfa3048

    • SHA1

      189962ecb9c3bef7e33331057ad106310228dccf

    • SHA256

      28871383f57d2de8eceed38089642676ea55a24c9c2b153e4a11f97e3bc6effb

    • SHA512

      58d9f2d0cc6ae9e84ecd7931022ef2d74d84c76e408a459ca0b62fd956ff1035ee4deb897e14342b7b4442b8c9b6cb1c25a6d1c817507578dd03f0110ef18f4e

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks