Overview

overview

10

Static

static

7

com.booste...er.apk

android-9-x86

10

com.booste...er.apk

android-10-x64

10

com.booste...er.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    com.booster.supercleaner.apk

  • Size

    5.1MB

  • Sample

    230110-sx2xxscc81

  • MD5

    f7f87cd8579db367e27f73d9cc10ccde

  • SHA1

    89480a760efbadf9d23487eeb14cccfd76e72f29

  • SHA256

    7f83936e0bb51cb03b4394b17ddd723e2b1759359feb3ab2c2debfe57fe187aa

  • SHA512

    20354c216fc44c9b0c4b3981d8f246d34ee53cc43b099f0816aa2b9aa6547c3c536560111cf5b2c990d8635f466152b0d9b098669da93f7bf4a1040684891813

  • SSDEEP

    98304:zbUk8fS4761XgYcHl6YIJNHcGTgqQ4SrI/FpyXkKRAqyqL6FkSc:zp4MXbmdKcV4yUrEL6Hc

Score
10/10
agent_smithadwareandroidevasionransomware

Malware Config

Targets

    • Target

      com.booster.supercleaner.apk

    • Size

      5.1MB

    • MD5

      f7f87cd8579db367e27f73d9cc10ccde

    • SHA1

      89480a760efbadf9d23487eeb14cccfd76e72f29

    • SHA256

      7f83936e0bb51cb03b4394b17ddd723e2b1759359feb3ab2c2debfe57fe187aa

    • SHA512

      20354c216fc44c9b0c4b3981d8f246d34ee53cc43b099f0816aa2b9aa6547c3c536560111cf5b2c990d8635f466152b0d9b098669da93f7bf4a1040684891813

    • SSDEEP

      98304:zbUk8fS4761XgYcHl6YIJNHcGTgqQ4SrI/FpyXkKRAqyqL6FkSc:zp4MXbmdKcV4yUrEL6Hc

    Score
    10/10
    agent_smithadwareevasionransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Acquires the wake lock.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the unique device ID (IMEI, MEID, IMSI).

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks