General

  • Target

    a276170677279c95f8364b1a96035630_JaffaCakes118

  • Size

    5.3MB

  • Sample

    240612-1bh7pa1crg

  • MD5

    a276170677279c95f8364b1a96035630

  • SHA1

    cd6f96bf406c642efdb4b95931cf02eedc6fcc91

  • SHA256

    70b1d90ec3880d0ad357b3fe14172d5d26b33ad23a354299fccaa1f3c7afac0f

  • SHA512

    9030dec32ae1a6649d58543f6a6bc64848d8e53daa781abb665617f300a1177bda48468e7e2417954521ecaccc35d715cc28be4e0d11df4259b2854172fe325d

  • SSDEEP

    98304:wXI9UGxL2LmZGaSRahhBkIom7BLnwVsjQfS9NDReWNKyLmsn:8I+GxLgmkRwomVn/QfWDRz

Malware Config

Targets

    • Target

      a276170677279c95f8364b1a96035630_JaffaCakes118

    • Size

      5.3MB

    • MD5

      a276170677279c95f8364b1a96035630

    • SHA1

      cd6f96bf406c642efdb4b95931cf02eedc6fcc91

    • SHA256

      70b1d90ec3880d0ad357b3fe14172d5d26b33ad23a354299fccaa1f3c7afac0f

    • SHA512

      9030dec32ae1a6649d58543f6a6bc64848d8e53daa781abb665617f300a1177bda48468e7e2417954521ecaccc35d715cc28be4e0d11df4259b2854172fe325d

    • SSDEEP

      98304:wXI9UGxL2LmZGaSRahhBkIom7BLnwVsjQfS9NDReWNKyLmsn:8I+GxLgmkRwomVn/QfWDRz

    • Checks if the Android device is rooted.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks