General

  • Target

    6d25d145092bcf8e4aa1b4f757c30b43_JaffaCakes118

  • Size

    17.8MB

  • Sample

    240524-dn8a1sba6s

  • MD5

    6d25d145092bcf8e4aa1b4f757c30b43

  • SHA1

    7b75d70ca1a717daf6b9d0e7766bd3ad58519c27

  • SHA256

    25588667fbce2d40a1853654aaad1e049032db59bcb13138753e1641dbae0370

  • SHA512

    6b9d27f5ddd9b4faeb1e2f05e0136471ea325a3ebf8a02975d15d172c8d9335ff5a401cecad0044e712e7d6a5a3407a2fef800842823926dd432dc79de7abcb4

  • SSDEEP

    393216:M+QrPQnUvn7HgNGKHXoJRKUJin+G17Jd1Cs0aC:M+60vHGRKqauUC

Malware Config

Targets

    • Target

      6d25d145092bcf8e4aa1b4f757c30b43_JaffaCakes118

    • Size

      17.8MB

    • MD5

      6d25d145092bcf8e4aa1b4f757c30b43

    • SHA1

      7b75d70ca1a717daf6b9d0e7766bd3ad58519c27

    • SHA256

      25588667fbce2d40a1853654aaad1e049032db59bcb13138753e1641dbae0370

    • SHA512

      6b9d27f5ddd9b4faeb1e2f05e0136471ea325a3ebf8a02975d15d172c8d9335ff5a401cecad0044e712e7d6a5a3407a2fef800842823926dd432dc79de7abcb4

    • SSDEEP

      393216:M+QrPQnUvn7HgNGKHXoJRKUJin+G17Jd1Cs0aC:M+60vHGRKqauUC

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks