General
- Target 77bffbfa5b6e051605841f1ab1625639_JaffaCakes118
- Size 7.8MB
- Sample240527-dwyrjsfd78
- SHA256 e8a505213fd3e84459e0542b2dad670be1e0a40145796c7a8cc9d0f92d7f3bcd
- MD5 77bffbfa5b6e051605841f1ab1625639
- SHA1 1b581637eed1225e055788e1eb46883564b8b606
- SHA512 41a35431d75180783eee3c076ea71e4217e0b1b23b7976f47213bb3c44c87b62819988b6ff0cd73d6bf26e7663848dd2afa84283cbe4775893c6999ffbb1eac8
- SSDEEP 196608:PIzx498UW9TKo52C/WnjzNxtmk/clbcX+5o5:PId88aoYC/WjJ/AI+5o5
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
77bffbfa5b6e051605841f1ab1625639_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
77bffbfa5b6e051605841f1ab1625639_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
77bffbfa5b6e051605841f1ab1625639_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
- Target 77bffbfa5b6e051605841f1ab1625639_JaffaCakes118
- Size 7.8MB
- SHA256 e8a505213fd3e84459e0542b2dad670be1e0a40145796c7a8cc9d0f92d7f3bcd
- MD5 77bffbfa5b6e051605841f1ab1625639
- SHA1 1b581637eed1225e055788e1eb46883564b8b606
- SHA512 41a35431d75180783eee3c076ea71e4217e0b1b23b7976f47213bb3c44c87b62819988b6ff0cd73d6bf26e7663848dd2afa84283cbe4775893c6999ffbb1eac8
- SSDEEP 196608:PIzx498UW9TKo52C/WnjzNxtmk/clbcX+5o5:PId88aoYC/WjJ/AI+5o5
- MD5 SHA1 SHA512 SSDEEP
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the phone number (MSISDN for GSM devices)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
- Target gdtadv2.jar
- Size 73KB
- SHA256 e344405b31ad9a52e9bcea6bc6ad7d0858ba4008102283adb1c72d86443ac796
- MD5 07843c6d5969b685d39a7dadf635237e
- SHA1 3070199d4c497ad96e7f0d2beaa5ab9d8772234c
- SHA512 b4e3e245641ce61757d5cfb74f6b39ec7ba4a2aeb0818a589af852e99a2669f849d334b1c57e4edb1c50ba5f3ecdf928650007d206c34f83e9eb8682d7455c8f
- SSDEEP 1536:YrNP+qzuTVQX1K9MR4/u6g591bFcEQIkkRM5E7Pe6NEkEC:8xzvK9M8g591bFcEbDume6NEK
- MD5 SHA1 SHA512 SSDEEP
Score1/10