General

  • Target
    954b1ad511ddbb44d9af8dbb89c8553f_JaffaCakes118
  • Size 14.9MB
  • Sample240604-sfvsaabf28
  • SHA256 c015bddd1b040de5cb3a60b3b1d7f31540c01d723333178797a9029f3f91c975
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      954b1ad511ddbb44d9af8dbb89c8553f_JaffaCakes118
    • Size 14.9MB
    • SHA256 c015bddd1b040de5cb3a60b3b1d7f31540c01d723333178797a9029f3f91c975
    • MD5 SHA1 SHA512 SSDEEP
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Target
      yayavoice_for_assets.jar
    • Size 244KB
    • SHA256 b727e3c6ba0d1b1ff9042ab2071ee33eaa2d54bccabcaefaab3760cb8a18f8ed
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks