agent_smith | 27f3cae4d7468ceeabc36d2a00f3ef67096a177f6a59640697e7457f0a5625d1

Analysis

max time kernel
3756706s
max time network
14s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
08-07-2022 17:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

27f3cae4d7468ceeabc36d2a00f3ef67096a177f6a59640697e7457f0a5625d1.apk
Size

2.5MB
MD5

3a8e6a6e1866c9c62bd0209915645ccc
SHA1

ee05e89ea4aca1bd421652cf18dce028e0f32e69
SHA256

27f3cae4d7468ceeabc36d2a00f3ef67096a177f6a59640697e7457f0a5625d1
SHA512

c227216374afd88b1950241e67c436de63a652e618d385defec1c722c8cdebd2f3139ef88ae8cee0dccd7b71a08d34cab5b3d5fe45825da03b29c4b27eb66250

Score

10^/10

agent_smith adware ransomware

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.dfoiej8.ccsdyia

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.dfoiej8.ccsdyia

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.dfoiej8.ccsdyia

com.dfoiej8.ccsdyia
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4274

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.dfoiej8.ccsdyia/app_jar/lpdf.jar
Filesize
35KB

MD5
e1ab911d4b585a26aae02d8540575013

SHA1
ac148f7bdf95edddc97d9224ff51a771f1070520

SHA256
8a71fab57b4a03f0b37095daa2eaa086ec6ed6c1c6166ca67c0e0a9e14cc85ca

SHA512
983ec12cde3cbfaffb414b8c8eb17c793bee558eb51b9d5e630f9bd5f312e0ce55622719aad6097a799286c25001212b26d7053e7e110a4918beace33d3bcbc4

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/Web Data
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/Web Data-journal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/metrics_guid
Filesize
36B

MD5
8b3f5934d78dad90d9a40d8bcbc2e131

SHA1
29ae5bfd99a5f065cfddf84f7b32f95ec784a9ca

SHA256
3e66624a1af739b7b24b2c08c4c25387c45aed80a9333a6dcb81189120a1d267

SHA512
66a8decf377608fe4e2e64df367b47a7d4574b326911c0e4bbd77ce1f220ee5273ade07847c386fda67674038640314de49af7af858936776712b9878af9aefd

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/XinZF_conf.xml
Filesize
122B

MD5
76a516ec620e2508e512a673a58347a3

SHA1
386e9ee5d38602ebdca74bc24b24d75b1a765e8c

SHA256
245368df69958cb3da7feaea45e63731daf36a8954e5982bc36ed91eb439c6b5

SHA512
e4e96e50d4119fb2ba9d28b997b4991cf5e14ea7ea43c25304c3a40850a7744491f25e2ee0c7e500bc02e203669ff1cdee302f96534960bbcca3760ff8d192a8

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/XinZF_conf.xml
Filesize
170B

MD5
c4c3c67c4ad23ffab80df16279a0b50f

SHA1
951ad83a077d66dbe063083df0060cee114e6aae

SHA256
791c13bb883adf64f9bb3ead682b29a828459fcf6c9eeb53f14a3a12e5785989

SHA512
8a6810e9f42f315ed0333a55b1034a7fc52c32ed797bca99d93530ebafb4c0e42c85b4380a696b5419ce521119b2d1ffc3306cca2626460a1440611aabc028ad

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/com.dfoiej8.ccsdyia_preferences.xml
Filesize
143B

MD5
f09d81bad9a06f6f671049bee0558001

SHA1
ebf202876076f68e1672f15ba3d7e5b05768f6f5

SHA256
07821a6e27c946c827dc1d9b21b160e2e4d86b5348175549fbb13e8b660dd6b3

SHA512
1e3bbd65aefad9e2e647f2230511f6884da183cf0ef73670b6777ebb0c6fb452218e160d6cde68fe4d903282861c94785665283e5f2cd22b9ab67abae7ab7ee4

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/com.dfoiej8.ccsdyia_preferences.xml
Filesize
200B

MD5
d9f8f8a3c519cd55cad6ca11005bb0ee

SHA1
49ba198cfd02ebcee5012fb6033c13aa2e1a8358

SHA256
bebafd67f633dffe58de6a56b21f81e2be617a0632e353fbb0cc0167b9670609

SHA512
92b247e80cb4d0ef60655326789ebebe1c9d2fb9883aa829e9631237d072e1636890f42b5260be2359e0b83d7d2034887ddc5f1390fde42a8dd449d45e911e48

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/info.xml
Filesize
400B

MD5
22797a14b292745dc63e6dc9401ebd49

SHA1
f6878d33659ff0a7c5b83f551ad3ffe60aeed0b5

SHA256
712b6e892b1d1fb2a3a8b97afe5a39c3ba13dcbcc056c09dba041f9845b65682

SHA512
5ab93b2a3f0f840da573ba1f1a985910019a9f00fd0081fd775d0317f628ae55c55c4176b095cb117a2a381654fbf5811ec3ceb6bf3bdd5a8b440aca345af427

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/umeng_common_config.xml
Filesize
112B

MD5
bd5720180f2d4647cc2196b6371b0b6f

SHA1
d149531390b8a90c30f5f4bc381b2599e2ec7d3e

SHA256
739565c772a7e976f6809dca13c58ee7b81f886fd24ef78dc4863c86e1f7b08c

SHA512
b08fe10dcc32b56fbedead421948b1295e744ad51d9e8d7d34e10949fa3c9fe3fc522161a37a1d209a4eafd4d459baedda1cfdeadbf1b330155b4dd5f62dc01f

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/umeng_common_config.xml
Filesize
172B

MD5
548cfc988534b106552d72d35c8b04bf

SHA1
7a859b40b81a507fc2e806dd854a845a702d9c98

SHA256
5fc19095c2f6ec3b48f074bfab94c3a7a69c1ebc5768f5e7fc2b259c7bca653d

SHA512
e68b791833f646c3b83275dace1af71b9e2c60b8dfdcb199905b180ff72c28176cea4d559eebb3e79f0ff9195b8e2440226279c71672fbd20fc887782fdf6128

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/umeng_common_config.xml
Filesize
237B

MD5
5c49609ae7a9cfa789be2f61858b71d5

SHA1
9c1f5dcc8c83543324392c0e2f909877efdd37a9

SHA256
db186e0f122408a81297beeb81246c73bf66568b1fe3b005a9ab7c362b41c1f3

SHA512
e297083cf7f9fd4afc34f169fdaeba7c8ae8f91c4f5828e4d09d08e52374d0597c16448279302cb1c095905478b8d9af60f3d2f1656cd4404f2612582a4440ea

Download Submit
/data/user/0/com.dfoiej8.ccsdyia/shared_prefs/umeng_common_location.xml
Filesize
390B

MD5
67f729dc77a3c4c773e2c2e6660ab8cd

SHA1
9122cf56e4985a4c1c494159648f398055224dd2

SHA256
3c3207eba967d3afbfbf4d6bfb76215691c8cf70d960071af690894a2b4936fc

SHA512
94a613cd51657e766ce670c34868f3127b76adfd54c23e63b0b34e0f36313f092da282abd2e111b70f6f91671f6beded77fcdbf04bfc4e8e6d93ebe6dd015903

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
295885f43f37e1e85c1375c9ac846cf8

SHA1
423f287bfe7a5fe51673ff5f4563c5be51adecf9

SHA256
f60d7a7d5da541fcecf07f2e91d605edc6ec1e1af354995deaf843f33ab9a740

SHA512
fa56208d4bb544387b2d057c0b19883e8ef39ee79c47d8fd9c6548532c7f8b7b14fea580e1e3523daf65292d82fdd08c0ba0586220f6bee0762abee302f0a741

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
c28a86ef3d569145c9455b4ed8199d7f

SHA1
b770c7a02479cac2d4596ca9eda46155fd196468

SHA256
d38e276041387150c5894b16f4ff3c17574218e5d5db4b3f7fdae8f09b670412

SHA512
49fd88bb8b506de2d71ead7875df8680353c36be4d3db17bfc69ed03fc8596e538100e47cbdaddcf21b12f044aac5f26d0d9b41f1e35df63176a54fad69beafa

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads