General
-
Target
a0c1d5d06d819b240c4e42b59d9b3dad_JaffaCakes118
-
Size
1.3MB
-
Sample
240612-p82vhszanj
-
MD5
a0c1d5d06d819b240c4e42b59d9b3dad
-
SHA1
f9be0f3b6c76a25ddae5fab82da9f25b8a4754c9
-
SHA256
fe8e65fc7ce2fb156b3a6672c46ab0e06d3c7a921f4414181ecd44def67d9cd7
-
SHA512
bf1001fea7f39fe2dce41e69e7253233001efd0e206bc030464ec370d645df490e1d76eb3b1ae0bf9dc2c01ee1088b9aa5488fe08d198fc6d051d73c02901640
-
SSDEEP
24576:WNcEoL0otaYtXM7SprkM4FqD5Bl0ZHqU+ojPo+hAjlgXq/13tdHbZKm51Ob83I:WMQ7YtNrkruBl0ZH1jzKjlgXq/1XHNKR
Malware Config
Targets
-
-
Target
a0c1d5d06d819b240c4e42b59d9b3dad_JaffaCakes118
-
Size
1.3MB
-
MD5
a0c1d5d06d819b240c4e42b59d9b3dad
-
SHA1
f9be0f3b6c76a25ddae5fab82da9f25b8a4754c9
-
SHA256
fe8e65fc7ce2fb156b3a6672c46ab0e06d3c7a921f4414181ecd44def67d9cd7
-
SHA512
bf1001fea7f39fe2dce41e69e7253233001efd0e206bc030464ec370d645df490e1d76eb3b1ae0bf9dc2c01ee1088b9aa5488fe08d198fc6d051d73c02901640
-
SSDEEP
24576:WNcEoL0otaYtXM7SprkM4FqD5Bl0ZHqU+ojPo+hAjlgXq/13tdHbZKm51Ob83I:WMQ7YtNrkruBl0ZH1jzKjlgXq/1XHNKR
Score8/10-
Removes its main activity from the application launcher
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
-