General
- Target e9f8dfd16433b25b9a05f2c770423466a0d1cfc2ca48da50df46b90b2f5f6cd6.apk
- Size 7.2MB
- Sample261015-1yl7vsd17p
- SHA256 e9f8dfd16433b25b9a05f2c770423466a0d1cfc2ca48da50df46b90b2f5f6cd6
Score
10/10
Malware Config
Targets
-
- Target e9f8dfd16433b25b9a05f2c770423466a0d1cfc2ca48da50df46b90b2f5f6cd6.apk
- Size 7.2MB
- SHA256 e9f8dfd16433b25b9a05f2c770423466a0d1cfc2ca48da50df46b90b2f5f6cd6
Score10/10Family: Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
Checks if the Android device is rooted.
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries information about active data network
Queries the mobile country code (MCC)
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
3System Checks
3