General

  • Target

    9acec844e5e3c2cda740381576ecb934_JaffaCakes118

  • Size

    11.5MB

  • Sample

    240610-qn3rraxbne

  • MD5

    9acec844e5e3c2cda740381576ecb934

  • SHA1

    fcc8a762aa7aab508ffe4e48bc10bb6850e5800d

  • SHA256

    06b50615389caae2f58f24e50f1c3bd9164652aff0719a1ba649f4f83401806f

  • SHA512

    3c5bb9e33e5cb21fa992bc4b60ecec72fcb683170c9fbef5bf519d2099c3a9b681d886cdd53e9174a62805545590f960e027bcfbcbe84e6327134cafac0ef020

  • SSDEEP

    196608:S07hE+mUVGhf4p007w1GqprPRyx76WOVXwldFwP03/cgsfJ/qrSbHi:SiWUVGd4p3f0rPXWWwPWccgFrSbHi

Malware Config

Targets

    • Target

      9acec844e5e3c2cda740381576ecb934_JaffaCakes118

    • Size

      11.5MB

    • MD5

      9acec844e5e3c2cda740381576ecb934

    • SHA1

      fcc8a762aa7aab508ffe4e48bc10bb6850e5800d

    • SHA256

      06b50615389caae2f58f24e50f1c3bd9164652aff0719a1ba649f4f83401806f

    • SHA512

      3c5bb9e33e5cb21fa992bc4b60ecec72fcb683170c9fbef5bf519d2099c3a9b681d886cdd53e9174a62805545590f960e027bcfbcbe84e6327134cafac0ef020

    • SSDEEP

      196608:S07hE+mUVGhf4p007w1GqprPRyx76WOVXwldFwP03/cgsfJ/qrSbHi:SiWUVGd4p3f0rPXWWwPWccgFrSbHi

    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

MITRE ATT&CK Mobile v15

Tasks