General

  • Target

    975b3983b6844e31eb52a05b95356519_JaffaCakes118

  • Size

    30.4MB

  • Sample

    240605-g1f9vaha75

  • MD5

    975b3983b6844e31eb52a05b95356519

  • SHA1

    bf0a8596ac29dc1e308f774599281464269d0376

  • SHA256

    e262b0bc12c68562355c9df1fc0b303fe55b3d4f60d0592ea3450b102d5b7bf9

  • SHA512

    8d61a335567b30d01e204dcd40c7fa9e99806fc61de63bfdb5f153a2d9476f16ff84c5172343d2c9b94c37b98a35abfc490e73aa269228746bf3b303be5293ed

  • SSDEEP

    786432:yP3dwVvs8MWOa53YlfeMbfHtmfknlxBf7/8TzOpin2u/Jn86Qr9W:USVvs8Mfa50d7tm83BfhVyd

Malware Config

Targets

    • Target

      975b3983b6844e31eb52a05b95356519_JaffaCakes118

    • Size

      30.4MB

    • MD5

      975b3983b6844e31eb52a05b95356519

    • SHA1

      bf0a8596ac29dc1e308f774599281464269d0376

    • SHA256

      e262b0bc12c68562355c9df1fc0b303fe55b3d4f60d0592ea3450b102d5b7bf9

    • SHA512

      8d61a335567b30d01e204dcd40c7fa9e99806fc61de63bfdb5f153a2d9476f16ff84c5172343d2c9b94c37b98a35abfc490e73aa269228746bf3b303be5293ed

    • SSDEEP

      786432:yP3dwVvs8MWOa53YlfeMbfHtmfknlxBf7/8TzOpin2u/Jn86Qr9W:USVvs8Mfa50d7tm83BfhVyd

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks