General

  • Target

    a8fe90bf5c7c56ac4655fd31d7dedd24_JaffaCakes118

  • Size

    31.1MB

  • Sample

    240614-lkmh5svdjb

  • MD5

    a8fe90bf5c7c56ac4655fd31d7dedd24

  • SHA1

    cc5c51ed0f36e6424761334b5dabe673a9e2ee30

  • SHA256

    7deb56b068e3250e9cc1e9ce5cbd2908767401a401ac51220923c729bddc48d9

  • SHA512

    b3be3861fda1e5d3135e69848234875be3bf2868c8c31eff3e4b21b755d43112756acc7c2b7df5e73bf79906a6dda87dfa6e8187b5518189d93b56e28d3d76b1

  • SSDEEP

    786432:zVqoA8SiNHFZxQmHxxBOOi22dh78cWavlBF1FoN+GX8/70Xk2P6GWix5E/6ie55z:zxbSyHTT/OOi2ul/1FoNj8jGkqQ/Cr

Malware Config

Targets

    • Target

      a8fe90bf5c7c56ac4655fd31d7dedd24_JaffaCakes118

    • Size

      31.1MB

    • MD5

      a8fe90bf5c7c56ac4655fd31d7dedd24

    • SHA1

      cc5c51ed0f36e6424761334b5dabe673a9e2ee30

    • SHA256

      7deb56b068e3250e9cc1e9ce5cbd2908767401a401ac51220923c729bddc48d9

    • SHA512

      b3be3861fda1e5d3135e69848234875be3bf2868c8c31eff3e4b21b755d43112756acc7c2b7df5e73bf79906a6dda87dfa6e8187b5518189d93b56e28d3d76b1

    • SSDEEP

      786432:zVqoA8SiNHFZxQmHxxBOOi22dh78cWavlBF1FoN+GX8/70Xk2P6GWix5E/6ie55z:zxbSyHTT/OOi2ul/1FoNj8jGkqQ/Cr

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks