General

  • Target

    Simple Drawing_2.0.apk

  • Size

    35.5MB

  • Sample

    221219-r967qsfc59

  • MD5

    9dff948b09883b8f5d963b8058664de8

  • SHA1

    63673ff6c9fe99c17cf7775cebfeaad16fbb9ef1

  • SHA256

    e6df2acf5bc1f01354453d6a101f6a11e9c0e70b37b06bdc81ef3fea579fb63a

  • SHA512

    bbd1bb8265c6159a06b94016eb4d599037dcc80e7db026ed6f29beee6b48e07ec3ad78038d09f1faf636b53604e0f68349a239d7e5a6fd9eb5e07423888699f3

  • SSDEEP

    786432:JbvUqj5PSvb3jf4COLDul6fjUBk/tHEv/vjciuxGKsU0pnXfrcS0FjcWd:xMqj5PSbjfjOvLJ/tHEvHjcikQnrad

Malware Config

Targets

    • Target

      Simple Drawing_2.0.apk

    • Size

      35.5MB

    • MD5

      9dff948b09883b8f5d963b8058664de8

    • SHA1

      63673ff6c9fe99c17cf7775cebfeaad16fbb9ef1

    • SHA256

      e6df2acf5bc1f01354453d6a101f6a11e9c0e70b37b06bdc81ef3fea579fb63a

    • SHA512

      bbd1bb8265c6159a06b94016eb4d599037dcc80e7db026ed6f29beee6b48e07ec3ad78038d09f1faf636b53604e0f68349a239d7e5a6fd9eb5e07423888699f3

    • SSDEEP

      786432:JbvUqj5PSvb3jf4COLDul6fjUBk/tHEv/vjciuxGKsU0pnXfrcS0FjcWd:xMqj5PSbjfjOvLJ/tHEvHjcikQnrad

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the unique device ID (IMEI, MEID, IMSI).

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks