Overview

overview

10

Static

static

7

ElMubashir...s).apk

android-9-x86

10

ElMubashir...s).apk

android-11-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ElMubashir(IPTV)(v6.5.1)(ADFree)(Modded By Hifi2007Reviews).apk
  • Size 11.8MB
  • Sample230111-bzdvfaab87
  • SHA256 c7ec9aa69819d69a495dda6244c1dc0714a0fecb16864552ae6577f32db36d48
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
agent_smithadwareandroidransomware

Malware Config

Targets

    • Target
      ElMubashir(IPTV)(v6.5.1)(ADFree)(Modded By Hifi2007Reviews).apk
    • Size 11.8MB
    • SHA256 c7ec9aa69819d69a495dda6244c1dc0714a0fecb16864552ae6577f32db36d48
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    agent_smithadwareransomware

    • Agent smith

      Agent smith is a modular adware that installs malicious ADs into legitimate applications.

      adwareagent_smith

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the unique device ID (IMEI, MEID, IMSI).

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks