Overview

overview

10

Static

static

10

1342d5143a...2e.apk

android-9-x86

10

1342d5143a...2e.apk

android-10-x64

10

1342d5143a...2e.apk

android-11-x64

10

Resubmissions

08/02/2024, 15:21

240208-srlnrage6510

08/02/2024, 09:26

240208-lelpnadd5710

Sharing

Copy URL Twitter E-mail

General

  • Target
    1342d5143ad7e6a2350b6adf8fc094e2eef1ab030c4dbe0ab55e6216447cd02e.bin
  • Size 7.0MB
  • Sample240208-srlnrage65
  • SHA256 1342d5143ad7e6a2350b6adf8fc094e2eef1ab030c4dbe0ab55e6216447cd02e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
smsagentandroidinfostealerspywaretrojan

Malware Config

Extracted

Family

  • smsagent

C2

  • https://f344-138-68-163-104.ngrok-free.app

Targets

    • Target
      1342d5143ad7e6a2350b6adf8fc094e2eef1ab030c4dbe0ab55e6216447cd02e.bin
    • Size 7.0MB
    • SHA256 1342d5143ad7e6a2350b6adf8fc094e2eef1ab030c4dbe0ab55e6216447cd02e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    smsagentinfostealerspywaretrojan

    • smsagent

      SmsAgent is an Android malware that targets victim SMS messages using Telegram as its C2.

      trojaninfostealerspywaresmsagent

    • Reads the content of SMS inbox messages.

      infostealer

    • Acquires the wake lock

    • Queries the unique device ID (IMEI, MEID, IMSI)

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks