e76a3ad99a5a35d079608aaf08a1181ebf7801778e2d80c3bd4119e55b56f4c4

General

Target
ab9daee9abff1868426d03a1e5f30d3d_JaffaCakes118
Size 19.3MB
Sample240614-1pc8laxcrc
SHA256 e76a3ad99a5a35d079608aaf08a1181ebf7801778e2d80c3bd4119e55b56f4c4
MD5 ab9daee9abff1868426d03a1e5f30d3d
SHA1 be4824ab763274d7ba1ba7f4b2f055b53f9ae754
SHA512 e82b7e1f9d4eed6ce3e754beafaae37255d858d28841ba978e80db5bf60bcdf16e05c7fcdd65c49423d6d8aff03439cf59da53eaa035b2298358e78d844065c2
SSDEEP 393216:mS5NV9NXsoRF3ILIwcCSD0muI7g4+zRLEn/yA3:FjZsoRFyIqsvuIE7zyn//3
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  ab9daee9abff1868426d03a1e5f30d3d_JaffaCakes118
- Size 19.3MB
- SHA256 e76a3ad99a5a35d079608aaf08a1181ebf7801778e2d80c3bd4119e55b56f4c4
- MD5 ab9daee9abff1868426d03a1e5f30d3d
- SHA1 be4824ab763274d7ba1ba7f4b2f055b53f9ae754
- SHA512 e82b7e1f9d4eed6ce3e754beafaae37255d858d28841ba978e80db5bf60bcdf16e05c7fcdd65c49423d6d8aff03439cf59da53eaa035b2298358e78d844065c2
- SSDEEP 393216:mS5NV9NXsoRF3ILIwcCSD0muI7g4+zRLEn/yA3:FjZsoRFyIqsvuIE7zyn//3
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

collection discovery evasion execution impact persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
- Requests cell location
  Uses Android APIs to to get current cell information.
  collection discovery
behavioral1
- Target
  bdxadsdk.jar
- Size 195KB
- SHA256 555e565b45d2b030652d914830ad427d15182797886316024a2f04df6ac81d5e
- MD5 c3b999326b7187bdd85fd971f93376d6
- SHA1 978fa76710506b2aa2dc1502e2697355cc64e34e
- SHA512 240981a457a3df5ce7f51ae1e0b323efc37b349a261e21d52ef8e9256d758f5c7dd4bcd6411ca2dc247de1beec2ad1a0f7f49d2370971c8c65f95b0d6c14b31e
- SSDEEP 3072:bFg/OTNG1obNXB45vAEsreszccGiXzU+wtBJPkyzy4H/mqku/DjEWKVQNCDu:u/Ow+x69ftc9XzStBJ8y5mqkYDjv3Gu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3 behavioral4
- Target
  gdtadv2.jar
- Size 420KB
- SHA256 0906bca7332f10d1bdc98b04eb5ad9de2af5da0590b5615aa5f66852b78d9369
- MD5 f0ee7f7dd1ef4e5cd436ed6e1c609e5a
- SHA1 7d112abb7896294b075721b0200f0812ed65a418
- SHA512 5912538f74fcbe24bba5e3eef2804fd160ccd002bf144e30dd910c9d52d6a3e2dc172a3baa1f6d64ed93346a9b1d4760ae17ec6d1c7c8a4de8cb9264b82bf2be
- SSDEEP 6144:mQCx8Rp2KiQB/B4Qfdw3Vr/+rwWTLAUq3PwB32k59CruFIBSSAOC8hkIwx:ok/z/BJfdUW8W8ho4k59tSaOCckIS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5