General
- Target 79ddbf56e1558c1b365f7959ceaba816_JaffaCakes118
- Size 31.4MB
- Sample240527-vql91abc2w
- SHA256 f533b8ff4d3ef8deed0233ba49743894c78585abe5b6ea4cb7eba9a2a86fe5ec
- MD5 79ddbf56e1558c1b365f7959ceaba816
- SHA1 128762a8eb0205c37455580e3eb1eae61dd2e18c
- SHA512 c4201a396d3a1ef5da5aedfd5643acce1cb3f312dc7f07b3c82a3ec5c455e8767f66dbc4fbb334bafb9f7f79d22d5af724af73b988eba79e039b2d03f26efcdf
- SSDEEP 786432:u/zM3Kk+L2xgL6vDIB3Jla2jqryABjIwUUjE3XS/A0F:u/iKN2q+vcFjsDswUUOS/A0F
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
79ddbf56e1558c1b365f7959ceaba816_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
core.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral3
Sample
core.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral4
Sample
core.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral5
Sample
lib.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral6
Sample
lib.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral7
Sample
lib.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral8
Sample
update.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral9
Sample
update.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral10
Sample
update.apk
Resource
android-x64-arm64-20240514-en
Malware Config
Targets
-
- Target 79ddbf56e1558c1b365f7959ceaba816_JaffaCakes118
- Size 31.4MB
- SHA256 f533b8ff4d3ef8deed0233ba49743894c78585abe5b6ea4cb7eba9a2a86fe5ec
- MD5 79ddbf56e1558c1b365f7959ceaba816
- SHA1 128762a8eb0205c37455580e3eb1eae61dd2e18c
- SHA512 c4201a396d3a1ef5da5aedfd5643acce1cb3f312dc7f07b3c82a3ec5c455e8767f66dbc4fbb334bafb9f7f79d22d5af724af73b988eba79e039b2d03f26efcdf
- SSDEEP 786432:u/zM3Kk+L2xgL6vDIB3Jla2jqryABjIwUUjE3XS/A0F:u/iKN2q+vcFjsDswUUOS/A0F
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Checks if the internet connection is available
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
- Target core.jar
- Size 258KB
- SHA256 d393578af1f32289aa04228833344dab453c97fe328e78011781e4c7d883645e
- MD5 b2357655677f96d71b90b581571776bf
- SHA1 9f1d8e6dca9a5d921c73d73dc73a03d99d6cb8cb
- SHA512 1861b04ab27ffb8e78c4b394daa7c806c11744774313018970bfc2310ea9fda218474caf4c93fb4f0f18f694829eb3f8ce457bd7c3996d102536e5b00e1f7ffe
- SSDEEP 6144:Y9POyYV7v8+OjykVYGsDqxio2c9rj66jWkmAo33ZsxtT:PyYq+cVYGEqxio2W9PoWT
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target lib.jar
- Size 123KB
- SHA256 7366541c781ee7acacb019d5b25f1f4cc0dd61789db9c7803aea8f4fdb4ba2b9
- MD5 0d879e14cce9207eca22dc4b1b5e425c
- SHA1 957c631a807195aca24ce474c6ec0d4e7a9cdafc
- SHA512 55ced50767215f17090ea6bb116dc84ce7d42b1e6911e6774905abad6fb054317c70d613f6b041f6e4fd3a3fe2080012726799753a441dd4337c464d991ddf44
- SSDEEP 3072:8myuDJJTyUq/+Bjs8eO/gkLQuzxDZdKCpzbrsvgCH3aIp8T:DrJJ2kqXoHpzjYnKIKT
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target update.jar
- Size 13KB
- SHA256 5f7e051deabeac4117a00a75462c06caef21967bcf06836e2a34c95c57e0d134
- MD5 06de38406f71b66a9535ed25a38646a5
- SHA1 c362e8447c6d09b2a88e7ff2d136c47de55c814e
- SHA512 bb398661f8f61083a0098c873efae706e661536bf539593dfd097c0203e582fcb199451c14f0b46bc7cb49a711616ccad6cb55fdd2bffa435bcf34ba11ec7cbf
- SSDEEP 384:p3owHvCANc9rZJbhP0AtcCuUSjpPMXyBYH:p3owHaqCrZJbhPdcCuUcpPda
- MD5 SHA1 SHA512 SSDEEP
Score1/10