General

  • Target

    974165dd0cf3820ffc36bd2d9bd8c089_JaffaCakes118

  • Size

    9.1MB

  • Sample

    240605-ft23asfh66

  • MD5

    974165dd0cf3820ffc36bd2d9bd8c089

  • SHA1

    8ee8eb9ba609a38e19ee5e0b8aa1267fc2e8e72f

  • SHA256

    e8b61d1a1c8f986187e2847d88c267ac4a9b5068e25e5ef512347531df3f8fb2

  • SHA512

    769cb7f9a599778a899b5667d18d03143ae4e7a042289a33207e6268a59da60c50877131629aad20267fc31297a7b7e5c9f3b4f699e6e89bd7a412b193a1c63a

  • SSDEEP

    196608:ELffnrB/8kS0ax+qlG+9zbLtNk7hDJZ5mEaD+78U8CmHC6Nqiwl:QLx8Br/BLtN+l3I4

Malware Config

Targets

    • Target

      974165dd0cf3820ffc36bd2d9bd8c089_JaffaCakes118

    • Size

      9.1MB

    • MD5

      974165dd0cf3820ffc36bd2d9bd8c089

    • SHA1

      8ee8eb9ba609a38e19ee5e0b8aa1267fc2e8e72f

    • SHA256

      e8b61d1a1c8f986187e2847d88c267ac4a9b5068e25e5ef512347531df3f8fb2

    • SHA512

      769cb7f9a599778a899b5667d18d03143ae4e7a042289a33207e6268a59da60c50877131629aad20267fc31297a7b7e5c9f3b4f699e6e89bd7a412b193a1c63a

    • SSDEEP

      196608:ELffnrB/8kS0ax+qlG+9zbLtNk7hDJZ5mEaD+78U8CmHC6Nqiwl:QLx8Br/BLtN+l3I4

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Reads the content of photos stored on the user's device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks