agent_smith | 8072cb1d1304b95d31f66882fdf7e7137ed49198dc46f2b2b47f599148bd144c

Analysis

max time kernel
914946s
max time network
19s
platform
android_x86
resource
android-x86-arm-20220621-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
submitted
24-07-2022 21:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8072cb1d1304b95d31f66882fdf7e7137ed49198dc46f2b2b47f599148bd144c.apk
Size

2.5MB
MD5

9fda111fa22d575bdf42f10fc86c68d4
SHA1

b832ed7772f6291712f391c54fc68797034665b7
SHA256

8072cb1d1304b95d31f66882fdf7e7137ed49198dc46f2b2b47f599148bd144c
SHA512

982b0797078dd0fbc89bb296bdcff51d65079a85052cd515a6cf65e00e73512efbbee594c785b4245e7b23742168aa83284472549c68c861cbd86d06f85a4e34

Score

10^/10

agent_smith adware ransomware

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.ssssdd.dddd

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.ssssdd.dddd

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.ssssdd.dddd

com.ssssdd.dddd
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4110

ls /sys/class/thermal
2⤵
PID:4822

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
2⤵
PID:4885

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.ssssdd.dddd/app_jar/lpdf.jar
Filesize
35KB

MD5
e1ab911d4b585a26aae02d8540575013

SHA1
ac148f7bdf95edddc97d9224ff51a771f1070520

SHA256
8a71fab57b4a03f0b37095daa2eaa086ec6ed6c1c6166ca67c0e0a9e14cc85ca

SHA512
983ec12cde3cbfaffb414b8c8eb17c793bee558eb51b9d5e630f9bd5f312e0ce55622719aad6097a799286c25001212b26d7053e7e110a4918beace33d3bcbc4

Download Submit
/data/user/0/com.ssssdd.dddd/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.ssssdd.dddd/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/com.ssssdd.dddd_preferences.xml
Filesize
143B

MD5
508af127c5e8ab6032dcb07bb51728ce

SHA1
27f20f887bd28001b0fc60d2c41ce1202c40a925

SHA256
a530bde408f7d83531d5a595408d02035bb0349e103832dd05e590c4fcc6b4c4

SHA512
ee29c9111bf89038c0ea5ba7f10c16d9ff98d9211fe7a5374481fd56fb3cc161af66c1b202a19c6eafc4522bdeb9bdc96dc52aec122587e40350493f5751b81e

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/com.ssssdd.dddd_preferences.xml
Filesize
200B

MD5
5707a5b18396d5c85599a51f2d111501

SHA1
9127d5b1df95b41d3996eb7811dec8a028c5ef40

SHA256
a702f757da6c82aecc55e8cab94a082838a3020c87d751ed0ee0dcf63b7b3c2e

SHA512
40dd0da3fe58dbbe40748a86d6d871cbf879399b1e2398ee0f957e922c6589cab9f03eb02be78e87f0d614720c088381d7a26651a6ebfe1761315e8e0f3d8233

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/com.ssssdd.dddd_preferences.xml
Filesize
242B

MD5
65cb7c8db3eae86a21c4a76947505f72

SHA1
598651ad40fe7f66b21e6294939316225e616355

SHA256
13b3cf3cebdcdbcaf3b2a3d1f5c58f85358a6734c7548c7872d002cfd14726e1

SHA512
604a1786866c52d69cab636d38c21ebf5e8d74294a8e89291c6f0f2b621a81e03b4108c6e679f17f971d0e0542dbd886b8388252e7745f4695e23259c53865f1

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/umeng_common_config.xml
Filesize
112B

MD5
e03453c723bddacb5729f417be63bcf4

SHA1
66f2013811e2175dae741ebe69a124b146b9e540

SHA256
0282508a29a6136a5ed7030a09091724645882605e22580d8fc000f64a358694

SHA512
6c58de514ba30ddbf10d7d086e1a5a3f9f1df912aaac154d1c48f6586e68e4ffef33121f9c1b189d5fa4603486649c5297d4766105adf67b657f680b16ca9684

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/umeng_common_config.xml
Filesize
172B

MD5
21b270a2b01acea848bdd27f8c740ece

SHA1
1997a2fea0f9499ec099b41b78cbf28ea656c7f6

SHA256
5792e1a667f653368ece45b248727e9128c8ce9cd917b0d994de3f061f28200c

SHA512
a2f150658dc9b94d5388717a504248e23e039a7d547f99f3e47ae91a9776a3c4c7a14ddd6ba18533ad73e41f2e4fe43c0b3d300ed9701741e5bfee203ed29242

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/umeng_common_config.xml
Filesize
237B

MD5
6ff9bbd56052bad90931569221f9e083

SHA1
6fe87e0fd01bc404ab4b65bab1cb4ed4015a2d4b

SHA256
bb77bd4ec9366df794f0ddbf2f4a664f87b65878c6656cea30324b90958c4913

SHA512
b6e79ee42ba9ccf597ed2c9b40158ff95502c866db8937a32f74e0b24033806ac2d6f73e9ab6ee01bc82fef5d02ce53d8c1c1621d79d35cc570a22ab7aab837f

Download Submit
/data/user/0/com.ssssdd.dddd/shared_prefs/umeng_common_location.xml
Filesize
390B

MD5
3570af2cf1f44a1777a30ee6ece4bbbc

SHA1
311107c145554935f869ab907f3bec923d594ad6

SHA256
de26d42ac51513a52eda4ae7cbcc1bac618d76924abc19719dd6d5fb7233b143

SHA512
4bc621e06249278887ad91180c3bba46cb8e7739db94ddb9f88ffb0b405844d6bcf6c3a88cd3731db9bc13ac9acefe01d3c1f0ce265de581163a0bfa1210faa1

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
3a7ba322732f9bce2ca1b23c4ebe25e6

SHA1
64746b059bdda05a27634d728efd62a49dc28edf

SHA256
f0f4459252c8a4bc06d4cbd05dfa77d7f30494e07ef8fa5f53b569e430479197

SHA512
c0f420b7fa8f366eaeda3b60c0712a55b3b09e1b1fe92793a5477251315b3a0726b5b644b54244f523804f545ffcc54597350eb591ebbdc068cd010ea501783f

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
213B

MD5
a7b1c74454f0c1dbca5d19dc97bf9761

SHA1
ce2619bdbbcb1e4a697252e2c93c2a1fb9f94c9c

SHA256
cc2b317245dfca0a12c92b88675cd8adcf0ecf0b932a4ef33df7f44d35e5f5d4

SHA512
7de9a45bf0cb8a98835d5897ee913b2c86d7573445507d91fb9f11bd5fc821ce038268215644b9316b81e4f912552e2761d89fd8266cb05db24a5fba3a54af29

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
167B

MD5
6ec36f7f9aa3118461b9fda3f3204ec7

SHA1
9f19917f21f6f104b99a3f12a0ee1dea5da2cd33

SHA256
1d0b80778547b45c657b1b74cc6cadede8d3d238a37314f423c6b43442057741

SHA512
c1d38cc7ec8f04bb7dab5ccfa1518239cc2feb4513684347163a922af667264fda7b9e5e6517c71158acfb85946f7cd9d0cbb6e460674e12e8950aa8245ce467

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
cef2725897fbeb092c9864361efb5f33

SHA1
790063951522223e9ec068a5ec2b380f600ee458

SHA256
3e378a054478d5db4c4628a3f43070b08c81085b34550beab0746a5c7f741266

SHA512
3d03dd84d56175055195b8e53f6818a541dd70799819ea3fbb8ebeab5d0cdf0b335ed0427cd43f63a9bcfb4ac25cf1b92c05b9b19f5d504a8d8f816e6316fcca

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads