General
-
Target
ElMubashir(IPTV)(v6.5.1)(ADFree)(Modded By Hifi2007Reviews).apk
-
Size
11.8MB
-
Sample
230111-bzdvfaab87
-
MD5
ef74dda7d58aa4344cf2f765818fb24d
-
SHA1
bae7e5e9594536a724c710f2012de6a291f8cf2d
-
SHA256
c7ec9aa69819d69a495dda6244c1dc0714a0fecb16864552ae6577f32db36d48
-
SHA512
bae29427e4049fbbdb38406fa7395af3beb3d7f452d7c1123ba85d2fa57c034dcac40d25b7051b58b21290b489a6e7ab77737a7a656c7730da0f401a28b35213
-
SSDEEP
196608:OexDf1mNRTrTbOFISzJIAdo99y1v9opQj25hLqM44ie823E+cvjiXyuypL0F1uS:OMDf12RTHq2SIAOHyyb5oz3wMGi5pL0n
Malware Config
Targets
-
-
Target
ElMubashir(IPTV)(v6.5.1)(ADFree)(Modded By Hifi2007Reviews).apk
-
Size
11.8MB
-
MD5
ef74dda7d58aa4344cf2f765818fb24d
-
SHA1
bae7e5e9594536a724c710f2012de6a291f8cf2d
-
SHA256
c7ec9aa69819d69a495dda6244c1dc0714a0fecb16864552ae6577f32db36d48
-
SHA512
bae29427e4049fbbdb38406fa7395af3beb3d7f452d7c1123ba85d2fa57c034dcac40d25b7051b58b21290b489a6e7ab77737a7a656c7730da0f401a28b35213
-
SSDEEP
196608:OexDf1mNRTrTbOFISzJIAdo99y1v9opQj25hLqM44ie823E+cvjiXyuypL0F1uS:OMDf12RTHq2SIAOHyyb5oz3wMGi5pL0n
Score10/10-
Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
-
Requests cell location
Uses Android APIs to to get current cell location.
-
Checks known Qemu files.
Checks for known Qemu files that exist on Android virtual device images.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries the unique device ID (IMEI, MEID, IMSI).
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data).
-