General
-
Target
998223ab4d891963bb7c45efdcf87e7d_JaffaCakes118
-
Size
13.6MB
-
Sample
240605-3cz8psbf61
-
MD5
998223ab4d891963bb7c45efdcf87e7d
-
SHA1
c76842ed9c5f64d9eef5fad66549d6219718df1f
-
SHA256
ebf49341e5816b7889c75d9c0d9ddafc1d19cb0897013dfc498716c97ba31cd4
-
SHA512
e540120619d9152e3de91507ce8596d30bb86ccf5f56109ec84e1e95a350646980e53da10f957ddcc37c8e51b721b4a50faff7a0336a9eb0c9bf3ae883e201d8
-
SSDEEP
393216:2lGgmR03tqrcVTRUGn85lRE/cj/zpH6gfR0kXAuEbZbKVYyb:2cg+03JG3tVfLXEbZVW
Static task
static1
Behavioral task
behavioral1
Sample
998223ab4d891963bb7c45efdcf87e7d_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
998223ab4d891963bb7c45efdcf87e7d_JaffaCakes118.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240603-en
Malware Config
Targets
-
-
Target
998223ab4d891963bb7c45efdcf87e7d_JaffaCakes118
-
Size
13.6MB
-
MD5
998223ab4d891963bb7c45efdcf87e7d
-
SHA1
c76842ed9c5f64d9eef5fad66549d6219718df1f
-
SHA256
ebf49341e5816b7889c75d9c0d9ddafc1d19cb0897013dfc498716c97ba31cd4
-
SHA512
e540120619d9152e3de91507ce8596d30bb86ccf5f56109ec84e1e95a350646980e53da10f957ddcc37c8e51b721b4a50faff7a0336a9eb0c9bf3ae883e201d8
-
SSDEEP
393216:2lGgmR03tqrcVTRUGn85lRE/cj/zpH6gfR0kXAuEbZbKVYyb:2cg+03JG3tVfLXEbZVW
Score8/10-
Checks if the Android device is rooted.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
-
-
Target
gdtadv2.jar
-
Size
230KB
-
MD5
33aeb27eefc5ae7838f01186e27d8816
-
SHA1
2a7ef64266577916f05cc841c9f977ca8a34568f
-
SHA256
c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59
-
SHA512
ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5
-
SSDEEP
6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm
Score1/10 -
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2