General

  • Target
    cab5dcc02f99e22e6a03a140fbea56f16097cb255fefc2075f75a582a3902e8d
  • Size 17.3MB
  • Sample221130-rmz5xagf37
  • SHA256 cab5dcc02f99e22e6a03a140fbea56f16097cb255fefc2075f75a582a3902e8d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      cab5dcc02f99e22e6a03a140fbea56f16097cb255fefc2075f75a582a3902e8d
    • Size 17.3MB
    • SHA256 cab5dcc02f99e22e6a03a140fbea56f16097cb255fefc2075f75a582a3902e8d
    • MD5 SHA1 SHA512 SSDEEP
    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks