Resubmissions

30-11-2022 14:56

221130-sbdm7sae53 10

02-05-2022 23:25

220502-3egt5sccd5 10

General

  • Target

    8b9986bebc5daceb4b58172d8502d4d180a094f5427d00e3b251a26e04498b77

  • Size

    840KB

  • Sample

    221130-sbdm7sae53

  • MD5

    cfbaaaff979e2b4ae30ced4af69afe98

  • SHA1

    da5a00be52d3b80c0797ac59a156afc73020ee41

  • SHA256

    8b9986bebc5daceb4b58172d8502d4d180a094f5427d00e3b251a26e04498b77

  • SHA512

    0f06b07670b4facace07b25479cabde4aac8bdd4f140690579db60e31d3d5c6b8836b9d82f4304a8d324cc6e43a974a62be687d542c8a340771a6c1c6edbaff8

  • SSDEEP

    24576:tByTvLFcecyHUC0ipzE8gPpoiRAmw6sJoGg+0IEbkmeK:tB5yKoyAmwZoGT0TeK

Malware Config

Targets

    • Target

      8b9986bebc5daceb4b58172d8502d4d180a094f5427d00e3b251a26e04498b77

    • Size

      840KB

    • MD5

      cfbaaaff979e2b4ae30ced4af69afe98

    • SHA1

      da5a00be52d3b80c0797ac59a156afc73020ee41

    • SHA256

      8b9986bebc5daceb4b58172d8502d4d180a094f5427d00e3b251a26e04498b77

    • SHA512

      0f06b07670b4facace07b25479cabde4aac8bdd4f140690579db60e31d3d5c6b8836b9d82f4304a8d324cc6e43a974a62be687d542c8a340771a6c1c6edbaff8

    • SSDEEP

      24576:tByTvLFcecyHUC0ipzE8gPpoiRAmw6sJoGg+0IEbkmeK:tB5yKoyAmwZoGT0TeK

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks