Overview

overview

10

Static

static

7

39aa9f2c44...46.apk

android-9-x86

10

39aa9f2c44...46.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39aa9f2c442b9237f4350b434ec0b83794ae3f18deceacb0c6651671080ae746

  • Size

    15.3MB

  • Sample

    221125-lh723agc45

  • MD5

    058f5a4037f42ee67766531988924c73

  • SHA1

    9cd3a910fd8ef392748e964c98dad7dff59fa066

  • SHA256

    39aa9f2c442b9237f4350b434ec0b83794ae3f18deceacb0c6651671080ae746

  • SHA512

    d80675a59ae5cfbaf74e7ac1cba7053f8211e22936a7cbc61750286e6a19bd5e1c2cab70ea217e90f46b3c91c1c8f1d013191044bd52b93e6366679f169e0c2c

  • SSDEEP

    393216:Te8ilU1aJkgRlonedGHce90GDfbDqA+UanNe41VbDzouX:GcvISneIva2TDQUMe41FzouX

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      39aa9f2c442b9237f4350b434ec0b83794ae3f18deceacb0c6651671080ae746

    • Size

      15.3MB

    • MD5

      058f5a4037f42ee67766531988924c73

    • SHA1

      9cd3a910fd8ef392748e964c98dad7dff59fa066

    • SHA256

      39aa9f2c442b9237f4350b434ec0b83794ae3f18deceacb0c6651671080ae746

    • SHA512

      d80675a59ae5cfbaf74e7ac1cba7053f8211e22936a7cbc61750286e6a19bd5e1c2cab70ea217e90f46b3c91c1c8f1d013191044bd52b93e6366679f169e0c2c

    • SSDEEP

      393216:Te8ilU1aJkgRlonedGHce90GDfbDqA+UanNe41VbDzouX:GcvISneIva2TDQUMe41FzouX

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests dangerous framework permissions

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks