smsworm | 1e359eac2575feafc8202c4d5b0558952c16c6468b99aee35170508c175ddb73

Analysis

max time kernel
157s
max time network
172s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
17-10-2024 17:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

android.html
Size

104KB
MD5

ff496339e50076173997a871b26aeaf9
SHA1

8f985baaa1c9ce53170b1068f71062b7e1f16b05
SHA256

1e359eac2575feafc8202c4d5b0558952c16c6468b99aee35170508c175ddb73
SHA512

97c5a30a2f58a565747c24bfb0bb8e864b5283615026fe8ea387eb3d979e1cdf7acda2451ea56e4e4501a4f3089d46893168d02eb66d30e7491d37b7a22b446d
SSDEEP

3072:SyFdr/s4uxHQZxxxAGO4kAspa3EgBlpbPj6Xaj7T4:5ruRGO4kAspa0gBLbI

Score

10^/10

smsworm infostealer spyware trojan

Malware Config

Signatures

Android SMSWorm payload 1 IoCs

Processes:

resource	yara_rule
/storage/emulated/0/Download/.pending-1729789648-finagro-movil-agronegocio-1-1.apk	family_smsworm

SMSWorm
SMSWorm is an Android malware that can spread itself to a victim's contact list via SMS first seen in May 2021.
trojan infostealer spyware smsworm
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/cpuinfo com.android.chrome
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.android.chrome

description ioc process

File opened for read /proc/meminfo com.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4282

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Download/.pending-1729789648-finagro-movil-agronegocio-1-1.apk

Filesize
1.6MB

MD5
cf354616d8837feb406a379df2a01c8a

SHA1
e570896ae23f8145a5e8fcd3b12d303ad87690da

SHA256
69aa3b2363d1fe68c484b4db0d90fa1402de4e0189b6f8bf6a332fd8f386b978

SHA512
737aa264249632a214c904f486836da8e5e92e1995493c6c236a4198bb970704d685e4103eb3071fc7d27324699a9727f0af699723c2c500ff426eadabf3003a

Download Submit
/storage/emulated/0/Download/.pending-1729789648-finagro-movil-agronegocio-1-1.apk

Filesize
1.7MB

MD5
d00d9352d8616224f7c40d1bf3857c6d

SHA1
142b6e4a5ae5001b76bf5d3d1118a6aaf916e053

SHA256
e355c53d0fb9041719b8c7af410a56c6a72ac924d32c6c11add2aa0693841654

SHA512
b9ac7c5d5804dfe310041822b48b347ab35382e93d9a1269a12904137169f85e7128739cafcda01683d41ea18ece8d2b904768a0bc70395795baa0f22a1932e8

Download Submit
/storage/emulated/0/Download/.pending-1729789648-finagro-movil-agronegocio-1-1.apk

Filesize
10.1MB

MD5
a3965d40e39187ecc9ac1a188eed9c6b

SHA1
9953c530e635bcd7a8dc0c1a34f6d933c36bbb9c

SHA256
734197814b4152bac436850c03622b35ea7414502e1750792e77a1278e2cd3df

SHA512
e9d05b9dc0731d086de2a93b1d184f9b59ad90716db6b78394b081f17b9b5cf3834ca6fe24c352abcedf5e033713323cebf1cc1b4d8f5a765eb1451c9d9aadb3

Download Submit
/storage/emulated/0/Download/.pending-1729789648-finagro-movil-agronegocio-1-1.apk (deleted)

Filesize
703KB

MD5
686992ed69707f994e9c247af9af5e39

SHA1
9ae1a7dc97c500d085496b820b6beb8ae0829de7

SHA256
70f960f439af664e4b062d0fb18a44a1433cfc520a4f2f3f506028978da08149

SHA512
18e21f04ec400789c9fe1bfb73ef6a801c72018ba2d3668d820d14e72ba3b5a8d92a7d7714b36f9dcc2bfca8090b7a5533aa143cd3738a0a35643b6bd1868365

Download Submit