General
-
Target
6daa0413c7a2e52b0f656e4cd24a3efb_JaffaCakes118
-
Size
16.5MB
-
Sample
240524-hpy6ysha9t
-
MD5
6daa0413c7a2e52b0f656e4cd24a3efb
-
SHA1
1b44472d5ee9a323100a588a9f13379f75dfe76d
-
SHA256
a634d2116bcde15cc876358ac4aa856b378928c69007c29afbe4308c5360f995
-
SHA512
ef3adc56521b2ce638f96e4b0d3893b6b42521f1edcfbb1c9c72080e04ee53ed73a53c3acfcac7073e2f8f4527c2bb61df4746381863a9eeb6505288954c7ca9
-
SSDEEP
393216:KaDFLTiwMojs5T7ftOEgyXrVaAiGGuj6t5PR1nf7IX0:KaDtTc6s5T7ftOEgyAAi0U5PTf7D
Static task
static1
Behavioral task
behavioral1
Sample
6daa0413c7a2e52b0f656e4cd24a3efb_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
6daa0413c7a2e52b0f656e4cd24a3efb_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Malware Config
Targets
-
-
Target
6daa0413c7a2e52b0f656e4cd24a3efb_JaffaCakes118
-
Size
16.5MB
-
MD5
6daa0413c7a2e52b0f656e4cd24a3efb
-
SHA1
1b44472d5ee9a323100a588a9f13379f75dfe76d
-
SHA256
a634d2116bcde15cc876358ac4aa856b378928c69007c29afbe4308c5360f995
-
SHA512
ef3adc56521b2ce638f96e4b0d3893b6b42521f1edcfbb1c9c72080e04ee53ed73a53c3acfcac7073e2f8f4527c2bb61df4746381863a9eeb6505288954c7ca9
-
SSDEEP
393216:KaDFLTiwMojs5T7ftOEgyXrVaAiGGuj6t5PR1nf7IX0:KaDtTc6s5T7ftOEgyAAi0U5PTf7D
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads the content of the browser bookmarks.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
-
-
Target
gdtadv2.jar
-
Size
468KB
-
MD5
6bfe094580c89ba696ef8772de47a552
-
SHA1
210bc4afce84b6e6bb36f97f68f9d3d9d3432643
-
SHA256
a884e386bf4ec066c9a82518c354be513182add87107552b1f4cf33dc80bddd4
-
SHA512
7ae8c9210957f06eb177fa0472ac1fcf80f0e6b1f308ec1906fe059c38623e404b37c34d9e8702cab66efc7ebfdc5400f1506db89b75a5fd1dd915ec2c2086a5
-
SSDEEP
6144:Nz015KiQP/B4tKQ3OTNgdJHqn+9ZMsH5EK9JKp0KMNd4IoCJlv0gxWky9+T2k57:N/Z/B/NgdliEZMs9JhZ4kykTlJ
Score1/10 -
MITRE ATT&CK Mobile v15
Defense Evasion
Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
2System Checks
2