General

  • Target

    9baeba302a00b8974191c8b15be26ebd_JaffaCakes118

  • Size

    13.5MB

  • Sample

    240610-xqteesxcpm

  • MD5

    9baeba302a00b8974191c8b15be26ebd

  • SHA1

    f6ab349db9efbb9ca575e42ada1301134de58a0c

  • SHA256

    19cea07da7787e8bf554ce47c606329d61bff8b2b1a426d995813a09fafe7dc2

  • SHA512

    061cf87832b4151de667ddbdaf89aaeed7cee4f67605f71cf467eb64d639b47fbe4a65a273a27df1c0c1a7e4e90741a57dd58d38e068dc148efc713c2d494cdd

  • SSDEEP

    196608:xzsWAsdLn3l248Kya68BtvfLkffmc6qIWnUy4Wu0X8MkKAeShDhHoYkvoqd/hNLT:xzbdrk48KJ683LkHrAKAeMeFN1So

Malware Config

Targets

    • Target

      9baeba302a00b8974191c8b15be26ebd_JaffaCakes118

    • Size

      13.5MB

    • MD5

      9baeba302a00b8974191c8b15be26ebd

    • SHA1

      f6ab349db9efbb9ca575e42ada1301134de58a0c

    • SHA256

      19cea07da7787e8bf554ce47c606329d61bff8b2b1a426d995813a09fafe7dc2

    • SHA512

      061cf87832b4151de667ddbdaf89aaeed7cee4f67605f71cf467eb64d639b47fbe4a65a273a27df1c0c1a7e4e90741a57dd58d38e068dc148efc713c2d494cdd

    • SSDEEP

      196608:xzsWAsdLn3l248Kya68BtvfLkffmc6qIWnUy4Wu0X8MkKAeShDhHoYkvoqd/hNLT:xzbdrk48KJ683LkHrAKAeMeFN1So

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks