General
- Target a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118
- Size 26.3MB
- Sample240613-ss6ejsvajd
- SHA256 228b47232fdbd86a57675f74fb8fcd95a403e87ce1a49f7ead286136607d4ad0
- MD5 a63dbdf5dfce0388b660f70dc5aeb161
- SHA1 59ad2c2b99f880176953b0cfb0b7f67eb72c6d06
- SHA512 515c36627ccf84eef8324a29c9c9d58bbc1f32908d165acd5a84328b6bf68768bb8536dbeb004add0412848c68afa1cff28f27663b6646f986134b399fa77a56
- SSDEEP 786432:oVKOyukixlBteFegQk8yuegXkn1UPm7v6e9AuG5D9UTbvd:oV+eZte8k8yKkn1UOwDal
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
gdtadv2.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
gdtadv2.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
gdtadv2.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
- Target a63dbdf5dfce0388b660f70dc5aeb161_JaffaCakes118
- Size 26.3MB
- SHA256 228b47232fdbd86a57675f74fb8fcd95a403e87ce1a49f7ead286136607d4ad0
- MD5 a63dbdf5dfce0388b660f70dc5aeb161
- SHA1 59ad2c2b99f880176953b0cfb0b7f67eb72c6d06
- SHA512 515c36627ccf84eef8324a29c9c9d58bbc1f32908d165acd5a84328b6bf68768bb8536dbeb004add0412848c68afa1cff28f27663b6646f986134b399fa77a56
- SSDEEP 786432:oVKOyukixlBteFegQk8yuegXkn1UPm7v6e9AuG5D9UTbvd:oV+eZte8k8yKkn1UOwDal
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Checks Qemu related system properties.
Checks for Android system properties related to Qemu for Emulator detection.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
- Target gdtadv2.jar
- Size 184KB
- SHA256 340df5c81b4b9ac9154746fdb9a88ebfc4046b72b28951dfefb85f1ab2faf358
- MD5 9c9416e5b583e395df107443deab01e6
- SHA1 9d7188b483bfe3dddc3d057a89a7f980006f26a9
- SHA512 93f690db06ed593061e634c6a4316ab1bf466806a6f3cf0ff971521664cd379d249642549e04c899edd0749a6fe524109fbd1cba51d96dd9d50aa40d23b2ffa4
- SSDEEP 3072:NkY8wpgkFStgq9PNPuOnoGKy/zc/jB5B4HbyQhg1DEzSGFGelzGRUZ1g1M:X8/kFSt1NPudGIjB5qbziozvSM
- MD5 SHA1 SHA512 SSDEEP
Score1/10