4e0fc432db13e73d56bd371dbe6aa0be1a93c85440ef2f85cc9cf77c07e9fe91

General

Target

819ec71387592fc5789c0fb15883057a_JaffaCakes118
Size

3.7MB
Sample

240529-xzp4csff42
MD5

819ec71387592fc5789c0fb15883057a
SHA1

56595f13c83831346463423e45b7f9880ad3d83d
SHA256

4e0fc432db13e73d56bd371dbe6aa0be1a93c85440ef2f85cc9cf77c07e9fe91
SHA512

55cf589ca604b39ef308b8b77d77717b33522a26b4a6dbb257fd20902badaaf68d4158bb0bf88e736144c53eb8c6bd6265cd17bbe839beb1cc5d8b4d4ab6499d
SSDEEP

98304:1h53JJvTcVuPaDzX6BLoNUYacWziWrnZIfkLQd3i:DJv4VuiD76Bk2YacSiInZzLOy

Score

8^/10

Malware Config

Targets

- Target
  
  819ec71387592fc5789c0fb15883057a_JaffaCakes118
- Size
  
  3.7MB
- MD5
  
  819ec71387592fc5789c0fb15883057a
- SHA1
  
  56595f13c83831346463423e45b7f9880ad3d83d
- SHA256
  
  4e0fc432db13e73d56bd371dbe6aa0be1a93c85440ef2f85cc9cf77c07e9fe91
- SHA512
  
  55cf589ca604b39ef308b8b77d77717b33522a26b4a6dbb257fd20902badaaf68d4158bb0bf88e736144c53eb8c6bd6265cd17bbe839beb1cc5d8b4d4ab6499d
- SSDEEP
  
  98304:1h53JJvTcVuPaDzX6BLoNUYacWziWrnZIfkLQd3i:DJv4VuiD76Bk2YacSiInZzLOy
Score

8^/10

collection discovery evasion impact
- Requests cell location
  Uses Android APIs to to get current cell location.
  collection discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries information about the current nearby Wi-Fi networks
  Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
  discovery
- Checks if the internet connection is available
  discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  
  plugin-deploy.jar
- Size
  
  206KB
- MD5
  
  02fe22caeb17a9d7c7f5c3914e3cda29
- SHA1
  
  7e3293216263ab967ca6e9a3c55ba589444e3de7
- SHA256
  
  0fba8eedb44faf95448ed7e25bcba48b49aa981e1e1e154fcbd90e48447813a4
- SHA512
  
  020324dd3b38d6d75fbb54f18caf0bfdff38e27b0c18aa83989b53e9da96a6d6c780f281b21da8f1b41e3de1206306954dc9d1e42aa2dd12f500b66e04f4c647
- SSDEEP
  
  6144:QVMQdIey/0Jl8L9umLtnWy6C0mNiEfWBm63:QVMbL/q2nL4g0mNXf7o
Score

1^/10
behavioral3 behavioral4 behavioral5