General

  • Target

    9b24498efc20ecb0ac36bc99ffaf8b57_JaffaCakes118

  • Size

    3.7MB

  • Sample

    240610-sr8hhs1grl

  • MD5

    9b24498efc20ecb0ac36bc99ffaf8b57

  • SHA1

    2bf844a981ec8567be7f53d722da7e2b947f6165

  • SHA256

    8327f9ab07b9394396fd8512c4622868ec2fbaccc1bfbf485222463fe0babc19

  • SHA512

    abc9e925b953c285275638fe247789486f3ea9717da4869d85b4c63510c2ff4367a62cf5fe815bd415952be925621f5452a5487d61df64341935d74acce2ef02

  • SSDEEP

    98304:k2ZvCrifJosdVpvCCjpR1SuNgH0Kq2dVb:kanlpvpfMzUKq0

Malware Config

Targets

    • Target

      9b24498efc20ecb0ac36bc99ffaf8b57_JaffaCakes118

    • Size

      3.7MB

    • MD5

      9b24498efc20ecb0ac36bc99ffaf8b57

    • SHA1

      2bf844a981ec8567be7f53d722da7e2b947f6165

    • SHA256

      8327f9ab07b9394396fd8512c4622868ec2fbaccc1bfbf485222463fe0babc19

    • SHA512

      abc9e925b953c285275638fe247789486f3ea9717da4869d85b4c63510c2ff4367a62cf5fe815bd415952be925621f5452a5487d61df64341935d74acce2ef02

    • SSDEEP

      98304:k2ZvCrifJosdVpvCCjpR1SuNgH0Kq2dVb:kanlpvpfMzUKq0

    • Checks if the Android device is rooted.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks