General

  • Target
    a6a6f12139a38516536c29afa3653a6a_JaffaCakes118
  • Size 765KB
  • Sample240613-1csshs1aqe
  • SHA256 b38d05fc639c641ec786a977d32225370e37b65518b00db078f0820cd8252946
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      a6a6f12139a38516536c29afa3653a6a_JaffaCakes118
    • Size 765KB
    • SHA256 b38d05fc639c641ec786a977d32225370e37b65518b00db078f0820cd8252946
    • MD5 SHA1 SHA512 SSDEEP
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries the phone number (MSISDN for GSM devices)

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks