agent_smith | 28a560e03b8bb161fc75155717e8ff0ffaca4f4412bc68d0646b21bb1b133f3e

Analysis

max time kernel
3748516s
max time network
18s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
08-07-2022 16:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

28a560e03b8bb161fc75155717e8ff0ffaca4f4412bc68d0646b21bb1b133f3e.apk
Size

2.6MB
MD5

66ae3f91b98cb1ebc827533cc23551bd
SHA1

f6ead154cd2284eea27f3904e176980d8abf2b21
SHA256

28a560e03b8bb161fc75155717e8ff0ffaca4f4412bc68d0646b21bb1b133f3e
SHA512

677a3fcc33a578524e0f1f2382429b2c4181a5c91b4d339400dc0aba58e3729602658f11942cb45746cbc7144000b41606780d46d17ce219996a0a5e38c0d682

Score

10^/10

agent_smith adware evasion

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith
Reads information about phone network operator.
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
evasion

Processes:

com.asdty3.vbxck

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.asdty3.vbxck

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.asdty3.vbxck

com.asdty3.vbxck
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:4758

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.asdty3.vbxck/app_jar/lpdf.jar
Filesize
35KB

MD5
e1ab911d4b585a26aae02d8540575013

SHA1
ac148f7bdf95edddc97d9224ff51a771f1070520

SHA256
8a71fab57b4a03f0b37095daa2eaa086ec6ed6c1c6166ca67c0e0a9e14cc85ca

SHA512
983ec12cde3cbfaffb414b8c8eb17c793bee558eb51b9d5e630f9bd5f312e0ce55622719aad6097a799286c25001212b26d7053e7e110a4918beace33d3bcbc4

Download Submit
/data/user/0/com.asdty3.vbxck/app_jar/lpdf.jar.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/app_jar/oat/x86/lpdf.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/app_jar/oat/x86/lpdf.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/Web Data-journal
Filesize
1KB

MD5
4489ed72dabbf599c2ee9c64303c83f3

SHA1
db6312790a480498f9e57b2f7f2b8bbc7f5546cb

SHA256
da6c3bee0dece4e11d67a1aa66c6c97c08fe248cb359c408839d59ed98ce4fc0

SHA512
c6092e82ec2cb70b3d3d3d1b0f708eeba10c23913222948c726ba76e1ff5ca8c352d5534fbbcd761eae75956927b11a461c522690ed80a21655d6f6dfacab25f

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/metrics_guid
Filesize
36B

MD5
91791b863c2d7f2eacfc0c58d17c7193

SHA1
013287b3fff57a092f466e3b1466f365fc7e8f7c

SHA256
d8845a78a957fe8cc58a63b6df060a5d2005c71b5054fa385513d72374e14548

SHA512
e98b959fc8a60b7aff823bf907f40b82f1c7016f7c35eafa2f4ea51b0a57c9b6fff31d99391645dad38c31a8b4e83b684cf6fae59f484c4bec1020a6ad869caf

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/XinZF.xml
Filesize
125B

MD5
237ae82ee89a2accf57cc2d78879094a

SHA1
0c2efe5d38dbb74625568265c72e3b624091bd57

SHA256
7c593841a5a94cb2e7e8b6b991eb936fbbb90cd68b02fb38795c1c24779dfff4

SHA512
414228ca69a9556e7ea86e3f0d9d1026479b72aa3ae9a3977f20dcdf489a1c25e61b4fc510eb54e0a7472985a309b472744190ee86b730cc08cd00e1ebb0ff08

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/XinZF_conf.xml
Filesize
122B

MD5
2eaf1b50441f9c8cb4b7b89476e754f0

SHA1
cf4af930a6762f5b606138af8cee22c01cf76424

SHA256
5e82b2bda3fd21a2ee833995d374723860020141440c16932925c34d1d953fef

SHA512
25ec7040480a2cceb9421897d10a95a635bd1afd105ccd0a3c1de807b6b61cdcd31840186d1750964a8d9026c16c7f0b9d2273951f9274d712a9860ebe0a5d43

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/XinZF_conf.xml
Filesize
169B

MD5
b15686625a6e9bdd23d3790af3cad917

SHA1
26fd0d33be80aebf5f6cba75d4513fbb07ec3d3c

SHA256
dce5a9cd9f801e1c08a3f3bd30fd402db8891c37b8626c8bddfbaa5d6a1c6d2a

SHA512
f9e94797102be19a252359c67ade80ecc844f35263d131e93f615904b1416056b7949cd5a6ec566a532c6c8880591c2689c62974cc83af4f1831f575e7ec6c96

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/XinZF_conf.xml
Filesize
208B

MD5
d384b8d7870d6bed2643eb4e0d14bd66

SHA1
1d96ae4c5766bfb91415c7cf8692bc30f8233756

SHA256
5936e0299829d95592676e7b938462db4113c728c569b8b57a39e4c2f1842211

SHA512
fa95119a5bde3cca87da786b46f4f3b1f170b3c22b8a21d63783a7ef1f9506bd6f77da623ed418ccf8fe7ece63e5cb538a645635a82ec8172d6c85055f0cdac1

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/umeng_common_config.xml
Filesize
111B

MD5
f23ad4320eceb4905d6d65a31ca6fb96

SHA1
9fba0def8b00e81588d215d4f82fb5c1d9ca54ad

SHA256
bb3e7591d76776ebdd65da6806e30c82bcd9db0ff972440ddc4d0566ce4b9ab5

SHA512
c7a9f4f9bb0fe9df25dc05aafafa43c115fcba86b2273a6d0470e4e57dd42a05661c832c1ce31409044203e9f814c56094a7dc4a3d82c16b863d1287c8e7abf6

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/umeng_common_config.xml
Filesize
171B

MD5
46d06f8cdab6b3f8d08ee6ececf64b09

SHA1
c030b9f5210d42f3bd89bd06e9930340b9c441eb

SHA256
22385e976a1bbc8b2b161aa027384ab391315ea18922468afcfbb751cbc1ecd0

SHA512
cf90035212afc3483f6f76b0af2497697e5c6b4c93c44b8b37ebd5dde43233b372077991b4d3377a0601a60256cc45a5c8dfca80bcdbb7269b6cabdab4f5641e

Download Submit
/data/user/0/com.asdty3.vbxck/shared_prefs/umeng_common_config.xml
Filesize
236B

MD5
54a70d566a22b6e8d529c2d279aa679b

SHA1
c3656aaa931f7b156cd88878ba41c6879899d32f

SHA256
43429856f2da2be98c8308adb28928af73a9ec609197d34eed7534faca779d33

SHA512
76969c226bb4e5646897e577d22a73478cb32291b5d657af7d87461b13215cd8b3a22dd11e55c1dd3768e508064a123c820ce84233e83f219e3ba5c20edd923c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads