General

  • Target

    998223ab4d891963bb7c45efdcf87e7d_JaffaCakes118

  • Size

    13.6MB

  • Sample

    240605-3cz8psbf61

  • MD5

    998223ab4d891963bb7c45efdcf87e7d

  • SHA1

    c76842ed9c5f64d9eef5fad66549d6219718df1f

  • SHA256

    ebf49341e5816b7889c75d9c0d9ddafc1d19cb0897013dfc498716c97ba31cd4

  • SHA512

    e540120619d9152e3de91507ce8596d30bb86ccf5f56109ec84e1e95a350646980e53da10f957ddcc37c8e51b721b4a50faff7a0336a9eb0c9bf3ae883e201d8

  • SSDEEP

    393216:2lGgmR03tqrcVTRUGn85lRE/cj/zpH6gfR0kXAuEbZbKVYyb:2cg+03JG3tVfLXEbZVW

Malware Config

Targets

    • Target

      998223ab4d891963bb7c45efdcf87e7d_JaffaCakes118

    • Size

      13.6MB

    • MD5

      998223ab4d891963bb7c45efdcf87e7d

    • SHA1

      c76842ed9c5f64d9eef5fad66549d6219718df1f

    • SHA256

      ebf49341e5816b7889c75d9c0d9ddafc1d19cb0897013dfc498716c97ba31cd4

    • SHA512

      e540120619d9152e3de91507ce8596d30bb86ccf5f56109ec84e1e95a350646980e53da10f957ddcc37c8e51b721b4a50faff7a0336a9eb0c9bf3ae883e201d8

    • SSDEEP

      393216:2lGgmR03tqrcVTRUGn85lRE/cj/zpH6gfR0kXAuEbZbKVYyb:2cg+03JG3tVfLXEbZVW

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Target

      gdtadv2.jar

    • Size

      230KB

    • MD5

      33aeb27eefc5ae7838f01186e27d8816

    • SHA1

      2a7ef64266577916f05cc841c9f977ca8a34568f

    • SHA256

      c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59

    • SHA512

      ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5

    • SSDEEP

      6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks