General

  • Target

    6cb184a701a3fd962acc1142c1fe6431_JaffaCakes118

  • Size

    17.7MB

  • Sample

    240523-3wfcmsdg81

  • MD5

    6cb184a701a3fd962acc1142c1fe6431

  • SHA1

    9131cbac9268b6341938ba4f0b62e9f3d82f23e0

  • SHA256

    87dd8db1811ab1d284e6bef69c025ec767ac05e57fce2ce3508e0cb6c0216e3e

  • SHA512

    9d49e8c547d72f64aec12c7bf7a3e9e53cf4f0f567ed794043acc5650b39673d055134b956060a7fd7c7f197c5fc3dc66ffb85810779945d8ed81406a1ddb34b

  • SSDEEP

    393216:kL3ANVeKiPtIRzpF5DVa/k4j3mvwFynu4ZN/p28yDpGJ6n:kL3QEtQVDVazjXFidT/d24M

Malware Config

Targets

    • Target

      6cb184a701a3fd962acc1142c1fe6431_JaffaCakes118

    • Size

      17.7MB

    • MD5

      6cb184a701a3fd962acc1142c1fe6431

    • SHA1

      9131cbac9268b6341938ba4f0b62e9f3d82f23e0

    • SHA256

      87dd8db1811ab1d284e6bef69c025ec767ac05e57fce2ce3508e0cb6c0216e3e

    • SHA512

      9d49e8c547d72f64aec12c7bf7a3e9e53cf4f0f567ed794043acc5650b39673d055134b956060a7fd7c7f197c5fc3dc66ffb85810779945d8ed81406a1ddb34b

    • SSDEEP

      393216:kL3ANVeKiPtIRzpF5DVa/k4j3mvwFynu4ZN/p28yDpGJ6n:kL3QEtQVDVazjXFidT/d24M

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the phone number (MSISDN for GSM devices)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks