General

  • Target

    8b9278af2df2f03953e542f2276c0a91_JaffaCakes118

  • Size

    880KB

  • Sample

    240601-ykhw6sdb8v

  • MD5

    8b9278af2df2f03953e542f2276c0a91

  • SHA1

    81c145d215c546d86ef5739cea826d5ebf5090a1

  • SHA256

    7f86a868283a0c876d065f9107d40a44cbf81acef9073b90aba85f3fdd0c080f

  • SHA512

    0b0acd7ecc7d8a7748dbd51dfdb75b5606b08276a1e5607c164ab2d159aa90ca9a0e9a1276f683c2233b4163602903269046a33cb72960c3d0992f1da8cde029

  • SSDEEP

    24576:1RobjDQF8QUFP9j3tlmFdLgKCGTkrYqHKZw83D7fSv:1RobjDQ/UFVjXmFZ4mvz7fSv

Malware Config

Targets

    • Target

      8b9278af2df2f03953e542f2276c0a91_JaffaCakes118

    • Size

      880KB

    • MD5

      8b9278af2df2f03953e542f2276c0a91

    • SHA1

      81c145d215c546d86ef5739cea826d5ebf5090a1

    • SHA256

      7f86a868283a0c876d065f9107d40a44cbf81acef9073b90aba85f3fdd0c080f

    • SHA512

      0b0acd7ecc7d8a7748dbd51dfdb75b5606b08276a1e5607c164ab2d159aa90ca9a0e9a1276f683c2233b4163602903269046a33cb72960c3d0992f1da8cde029

    • SSDEEP

      24576:1RobjDQF8QUFP9j3tlmFdLgKCGTkrYqHKZw83D7fSv:1RobjDQ/UFVjXmFZ4mvz7fSv

    • Removes its main activity from the application launcher

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Checks if the internet connection is available

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks