7bd2eb8813be48062ee42adf29bbb26931e8a90c3ed83a3934f0494f2f75722a

General

Target
a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118
Size 5.0MB
Sample240613-2h2s2stand
SHA256 7bd2eb8813be48062ee42adf29bbb26931e8a90c3ed83a3934f0494f2f75722a
MD5 a6eaf84475925f4153205f25ebf2c7b1
SHA1 30e553c05d0dfe983f7fb1d35b3692df3e76096a
SHA512 66127481adbe5373567930db79e1df097cbcf5220bacc9923482a3e8a72a896ccc88a1cec3719504ab97a399e54f9e558eab61a5964141db58a85390a90f1257
SSDEEP 98304:oJKd9J567myhtE+xg7QQ+8JvwbQDYcfWN0fhH3huSHeuQg0mx01wmAnzLqMuOnTn:LLyhGPqiDYcfW6NhuZPgVxfmSqMJnL3
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Targets

- Target
  a6eaf84475925f4153205f25ebf2c7b1_JaffaCakes118
- Size 5.0MB
- SHA256 7bd2eb8813be48062ee42adf29bbb26931e8a90c3ed83a3934f0494f2f75722a
- MD5 a6eaf84475925f4153205f25ebf2c7b1
- SHA1 30e553c05d0dfe983f7fb1d35b3692df3e76096a
- SHA512 66127481adbe5373567930db79e1df097cbcf5220bacc9923482a3e8a72a896ccc88a1cec3719504ab97a399e54f9e558eab61a5964141db58a85390a90f1257
- SSDEEP 98304:oJKd9J567myhtE+xg7QQ+8JvwbQDYcfWN0fhH3huSHeuQg0mx01wmAnzLqMuOnTn:LLyhGPqiDYcfW6NhuZPgVxfmSqMJnL3
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

discovery evasion persistence
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2
- Target
  eventservice.jar
- Size 218KB
- SHA256 23ad1ebc36c58fad8c9b6ca80c12f588173a091c5ff2e938f3308d6cfc07ec05
- MD5 459559bac3be2277f344b469c1c91aa5
- SHA1 b2dba0f45a260664d700750a4c57dc3bcd2bc4ab
- SHA512 a1e8e53687a6c0c3b06a79d9f72e367f631a3c9eb909fd218df71aa7ae6a416901d386ff48963aa7ec8851cd0eeecb14531de75c8efbfa36ffb6e0701d80137f
- SSDEEP 6144:9gCcYdsTKpUzz8ahkgP/dr0mFrlNJbybBCpRT:9gC1mTQUzzR7Z0MNJmbB4
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4 behavioral5