General
-
Target
apk.zip
-
Size
6.6MB
-
Sample
240107-xs6sjachg8
-
MD5
e3523cfc265cfe009eff00fe16f0da00
-
SHA1
0cb8fc29373a60687329eb2329e40626d3f028a4
-
SHA256
967393a6603bdaf0399641aa25acc5880fbad74d036312d326091d0687c245ab
-
SHA512
cfa2c6eb140f9b4670908ef24ff6167612d3c2c70af83bfd4758d7fe6e827b6df770e8f0e86574f99476a34d7739e732b16d2b1394544df134c982f6603e18f4
-
SSDEEP
196608:/CwTQLxeffSTHbdNTluzn2FmZkpipXAYylzj8/sv:/CwTQVQuVuz2U/pXAYgzjd
Behavioral task
behavioral1
Sample
apk.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
apk.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
apk.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Extracted
smsagent
https://f6ef-172-233-61-28.ngrok-free.app
Targets
-
-
Target
apk.zip
-
Size
6.6MB
-
MD5
e3523cfc265cfe009eff00fe16f0da00
-
SHA1
0cb8fc29373a60687329eb2329e40626d3f028a4
-
SHA256
967393a6603bdaf0399641aa25acc5880fbad74d036312d326091d0687c245ab
-
SHA512
cfa2c6eb140f9b4670908ef24ff6167612d3c2c70af83bfd4758d7fe6e827b6df770e8f0e86574f99476a34d7739e732b16d2b1394544df134c982f6603e18f4
-
SSDEEP
196608:/CwTQLxeffSTHbdNTluzn2FmZkpipXAYylzj8/sv:/CwTQVQuVuz2U/pXAYgzjd
Score10/10-
smsagent
SmsAgent is an Android malware that targets victim SMS messages using Telegram as its C2.
-
Reads the content of SMS inbox messages.
-
Acquires the wake lock
-
Queries the unique device ID (IMEI, MEID, IMSI)
-