Overview

overview

8

Static

static

6

935ab14e33...18.apk

android-9-x86

8

935ab14e33...18.apk

android-13-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    935ab14e332e00900733b08f2e738300_JaffaCakes118
  • Size 5.9MB
  • Sample240604-ch2qlshf6z
  • SHA256 2832995f968e658c7c14d45224acaa0bdb395a5bddda29383dcda50109b5ce96
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
androiddiscoveryevasion

Malware Config

Targets

    • Target
      935ab14e332e00900733b08f2e738300_JaffaCakes118
    • Size 5.9MB
    • SHA256 2832995f968e658c7c14d45224acaa0bdb395a5bddda29383dcda50109b5ce96
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    discoveryevasion

    • Checks if the Android device is rooted.

      evasion

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

      evasion

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Checks if the internet connection is available

      discovery

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    behavioral1behavioral2

MITRE ATT&CK Mobile v15

Tasks