General

  • Target

    892e584dc42e037a0d49989c1a1d2669_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240601-ddyzlagb63

  • MD5

    892e584dc42e037a0d49989c1a1d2669

  • SHA1

    1f17512e853563b7b05886ee1ae3cdb2abcf0ce1

  • SHA256

    856c0fe7f620b05d26bf3865193f92319c261add1c47547d1b264875ce244e2b

  • SHA512

    9ca9af546a1ab0a93bf9d79499e7ee4d35d58fbffe42802754fd9a014ef8d7a3497404e65d1d40f2f2de2a4aeb0657231353ee73ad092360ee4a4f7c785f74cc

  • SSDEEP

    49152:RQ68TruLLYbwQuawiPULj0YEfaUzveHY6:RQvTruLLYkQuawZLj0YEdzve46

Malware Config

Targets

    • Target

      892e584dc42e037a0d49989c1a1d2669_JaffaCakes118

    • Size

      1.5MB

    • MD5

      892e584dc42e037a0d49989c1a1d2669

    • SHA1

      1f17512e853563b7b05886ee1ae3cdb2abcf0ce1

    • SHA256

      856c0fe7f620b05d26bf3865193f92319c261add1c47547d1b264875ce244e2b

    • SHA512

      9ca9af546a1ab0a93bf9d79499e7ee4d35d58fbffe42802754fd9a014ef8d7a3497404e65d1d40f2f2de2a4aeb0657231353ee73ad092360ee4a4f7c785f74cc

    • SSDEEP

      49152:RQ68TruLLYbwQuawiPULj0YEfaUzveHY6:RQvTruLLYkQuawZLj0YEdzve46

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

MITRE ATT&CK Mobile v15

Tasks