General

  • Target

    6f6230d958943b2e9e38c6db2fbb744c_JaffaCakes118

  • Size

    13.2MB

  • Sample

    240524-wn16taee66

  • MD5

    6f6230d958943b2e9e38c6db2fbb744c

  • SHA1

    beea9d7157bf814213c52cbd3d126ff906b0b550

  • SHA256

    a3652077eb49ef8d995d11af1960fa4764e6c1e0210609706ad0b2ec6c3fe4be

  • SHA512

    3717b21f42920bcc969cf29f8c8fb67785371c8158143a87ec6a3159b729bda32b2d67922475a68e17edfcc35690c94750fc562e6c7a383ec0fe4a13999814e5

  • SSDEEP

    393216:zJvlJhEEUjs7lwAn9aR01eL1lKOoRP//LbzmH:BlJhEE9Tn951ehlKOAP//HyH

Malware Config

Targets

    • Target

      6f6230d958943b2e9e38c6db2fbb744c_JaffaCakes118

    • Size

      13.2MB

    • MD5

      6f6230d958943b2e9e38c6db2fbb744c

    • SHA1

      beea9d7157bf814213c52cbd3d126ff906b0b550

    • SHA256

      a3652077eb49ef8d995d11af1960fa4764e6c1e0210609706ad0b2ec6c3fe4be

    • SHA512

      3717b21f42920bcc969cf29f8c8fb67785371c8158143a87ec6a3159b729bda32b2d67922475a68e17edfcc35690c94750fc562e6c7a383ec0fe4a13999814e5

    • SSDEEP

      393216:zJvlJhEEUjs7lwAn9aR01eL1lKOoRP//LbzmH:BlJhEE9Tn951ehlKOAP//HyH

    Score
    7/10
    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks