General
- Target a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118
- Size 26.3MB
- Sample240613-ss6ejsvajd
- SHA256 228b47232fdbd86a57675f74fb8fcd95a403e87ce1a49f7ead286136607d4ad0
- MD5 a63dbdf5dfce0388b660f70dc5aeb161
- SHA1 59ad2c2b99f880176953b0cfb0b7f67eb72c6d06
- SHA512 515c36627ccf84eef8324a29c9c9d58bbc1f32908d165acd5a84328b6bf68768bb8536dbeb004add0412848c68afa1cff28f27663b6646f986134b399fa77a56
- SSDEEP 786432:oVKOyukixlBteFegQk8yuegXkn1UPm7v6e9AuG5D9UTbvd:oV+eZte8k8yKkn1UOwDal
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
- Target a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118
- Size 26.3MB
- SHA256 228b47232fdbd86a57675f74fb8fcd95a403e87ce1a49f7ead286136607d4ad0
- MD5 a63dbdf5dfce0388b660f70dc5aeb161
- SHA1 59ad2c2b99f880176953b0cfb0b7f67eb72c6d06
- SHA512 515c36627ccf84eef8324a29c9c9d58bbc1f32908d165acd5a84328b6bf68768bb8536dbeb004add0412848c68afa1cff28f27663b6646f986134b399fa77a56
- SSDEEP 786432:oVKOyukixlBteFegQk8yuegXkn1UPm7v6e9AuG5D9UTbvd:oV+eZte8k8yKkn1UOwDal
- MD5 SHA1 SHA512 SSDEEP
Score8/10Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
Queries information about active data network
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
-
- Target gdtadv2.jar
- Size 184KB
- SHA256 340df5c81b4b9ac9154746fdb9a88ebfc4046b72b28951dfefb85f1ab2faf358
- MD5 9c9416e5b583e395df107443deab01e6
- SHA1 9d7188b483bfe3dddc3d057a89a7f980006f26a9
- SHA512 93f690db06ed593061e634c6a4316ab1bf466806a6f3cf0ff971521664cd379d249642549e04c899edd0749a6fe524109fbd1cba51d96dd9d50aa40d23b2ffa4
- SSDEEP 3072:NkY8wpgkFStgq9PNPuOnoGKy/zc/jB5B4HbyQhg1DEzSGFGelzGRUZ1g1M:X8/kFSt1NPudGIjB5qbziozvSM
- MD5 SHA1 SHA512 SSDEEP
Score1/10