agent_smith | dc605338fcedb9e697bd557d40d13c668e8be0c02da3065b1834b6dc32ae37af | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
dc605338fcedb9e697bd557d40d13c668e8be0c02da3065b1834b6dc32ae37af
Size 2.6MB
Sample220725-d799qadbe2
SHA256 dc605338fcedb9e697bd557d40d13c668e8be0c02da3065b1834b6dc32ae37af
MD5 f55c6d856a1756577140e88eaa46707d
SHA1 30695d68188364cb1509ee0ddaff4647affa7fe6
SHA512 d3cda2da7fed95667c02aac09811dc6e9864bb2fd2436ccea94a139f1982f2dd878a280ee99ca718e443c9947060414c3325872a2bf26ffb91b6c48a918a6cfb
MD5 SHA1 SHA512

Score

10^/10

agent_smith adware evasion ransomware

Malware Config

Targets

- Target
  dc605338fcedb9e697bd557d40d13c668e8be0c02da3065b1834b6dc32ae37af
- Size 2.6MB
- SHA256 dc605338fcedb9e697bd557d40d13c668e8be0c02da3065b1834b6dc32ae37af
- MD5 f55c6d856a1756577140e88eaa46707d
- SHA1 30695d68188364cb1509ee0ddaff4647affa7fe6
- SHA512 d3cda2da7fed95667c02aac09811dc6e9864bb2fd2436ccea94a139f1982f2dd878a280ee99ca718e443c9947060414c3325872a2bf26ffb91b6c48a918a6cfb
- MD5 SHA1 SHA512
Score

10^/10

agent_smith adware evasion ransomware
- Agent smith
  Agent smith is a modular adware that installs malicious ADs into legitimate applications.
  adware agent_smith
- Requests cell location
  Uses Android APIs to to get current cell location.
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agent_smithadwareevasionransomware