General

  • Target

    9697cabd475b9eb2da186b155bb49ef4_JaffaCakes118

  • Size

    10.8MB

  • Sample

    240604-3ajg6seg5z

  • MD5

    9697cabd475b9eb2da186b155bb49ef4

  • SHA1

    8cd3686ac141c07208bb6892a245b768e3c92e53

  • SHA256

    4fa80b62226f915b1743a8191fcfce47e3d3052390fe216f3be6003dabf0ded7

  • SHA512

    9958c8e97b60edb217b77d5d2cb4168ebc3b8b0918689098cd5f951899bc084f178a2085822daf5393f3d23cd3fc2eca2d97bab0dcf0f7e8045be1337fb1be07

  • SSDEEP

    196608:1K79mfiH/631C0ayoo5SFhZWlPkZuSYBMwojw71YyKe4lf0sia+rT81XZZLOt4fx:Zcgayoo5SFh1ZeUjs7w0sia+cDNjIa

Malware Config

Targets

    • Target

      9697cabd475b9eb2da186b155bb49ef4_JaffaCakes118

    • Size

      10.8MB

    • MD5

      9697cabd475b9eb2da186b155bb49ef4

    • SHA1

      8cd3686ac141c07208bb6892a245b768e3c92e53

    • SHA256

      4fa80b62226f915b1743a8191fcfce47e3d3052390fe216f3be6003dabf0ded7

    • SHA512

      9958c8e97b60edb217b77d5d2cb4168ebc3b8b0918689098cd5f951899bc084f178a2085822daf5393f3d23cd3fc2eca2d97bab0dcf0f7e8045be1337fb1be07

    • SSDEEP

      196608:1K79mfiH/631C0ayoo5SFhZWlPkZuSYBMwojw71YyKe4lf0sia+rT81XZZLOt4fx:Zcgayoo5SFh1ZeUjs7w0sia+cDNjIa

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks