General

  • Target

    955b9bfa584af0b2ac24dc1411d18f65_JaffaCakes118

  • Size

    18.7MB

  • Sample

    240604-sv8yfscb43

  • MD5

    955b9bfa584af0b2ac24dc1411d18f65

  • SHA1

    6dc265bd4aefc3cb215fc2d1e703457b22ab5f13

  • SHA256

    19c055d3ba241e96ef77506e56bd2417fdb49351862352678b9f1bd5a87dac7e

  • SHA512

    ead9b47a192a976e59b42058c8e6d2264d4830ce981eb21b98723df99b0fbdbe18924c5381da6bdec3a8625155ef661ac203cb1231838b1aee73fc28024b86d1

  • SSDEEP

    393216:OJkjNifwbihHE/Wu+yOSVGG3YxvHscWwE/svOUOCzEjyXvS7gJT8OUj:OJkEfk+k/x+yTYxU1wE/yomqITo

Malware Config

Targets

    • Target

      955b9bfa584af0b2ac24dc1411d18f65_JaffaCakes118

    • Size

      18.7MB

    • MD5

      955b9bfa584af0b2ac24dc1411d18f65

    • SHA1

      6dc265bd4aefc3cb215fc2d1e703457b22ab5f13

    • SHA256

      19c055d3ba241e96ef77506e56bd2417fdb49351862352678b9f1bd5a87dac7e

    • SHA512

      ead9b47a192a976e59b42058c8e6d2264d4830ce981eb21b98723df99b0fbdbe18924c5381da6bdec3a8625155ef661ac203cb1231838b1aee73fc28024b86d1

    • SSDEEP

      393216:OJkjNifwbihHE/Wu+yOSVGG3YxvHscWwE/svOUOCzEjyXvS7gJT8OUj:OJkEfk+k/x+yTYxU1wE/yomqITo

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks