Overview

overview

10

Static

static

10

apk.apk

android-9-x86

10

apk.apk

android-10-x64

1

apk.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    apk.zip

  • Size

    6.6MB

  • Sample

    240107-xs6sjachg8

  • MD5

    e3523cfc265cfe009eff00fe16f0da00

  • SHA1

    0cb8fc29373a60687329eb2329e40626d3f028a4

  • SHA256

    967393a6603bdaf0399641aa25acc5880fbad74d036312d326091d0687c245ab

  • SHA512

    cfa2c6eb140f9b4670908ef24ff6167612d3c2c70af83bfd4758d7fe6e827b6df770e8f0e86574f99476a34d7739e732b16d2b1394544df134c982f6603e18f4

  • SSDEEP

    196608:/CwTQLxeffSTHbdNTluzn2FmZkpipXAYylzj8/sv:/CwTQVQuVuz2U/pXAYgzjd

Score
10/10
smsagentandroidinfostealerspywaretrojan

Malware Config

Extracted

Family

smsagent

C2

https://f6ef-172-233-61-28.ngrok-free.app

Targets

    • Target

      apk.zip

    • Size

      6.6MB

    • MD5

      e3523cfc265cfe009eff00fe16f0da00

    • SHA1

      0cb8fc29373a60687329eb2329e40626d3f028a4

    • SHA256

      967393a6603bdaf0399641aa25acc5880fbad74d036312d326091d0687c245ab

    • SHA512

      cfa2c6eb140f9b4670908ef24ff6167612d3c2c70af83bfd4758d7fe6e827b6df770e8f0e86574f99476a34d7739e732b16d2b1394544df134c982f6603e18f4

    • SSDEEP

      196608:/CwTQLxeffSTHbdNTluzn2FmZkpipXAYylzj8/sv:/CwTQVQuVuz2U/pXAYgzjd

    Score
    10/10
    smsagentinfostealerspywaretrojan

    • smsagent

      SmsAgent is an Android malware that targets victim SMS messages using Telegram as its C2.

      trojaninfostealerspywaresmsagent

    • Reads the content of SMS inbox messages.

      infostealer

    • Acquires the wake lock

    • Queries the unique device ID (IMEI, MEID, IMSI)

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks