General
-
Target
ad5bdd1c6153ec560dbcab6ea2480cc8_JaffaCakes118
-
Size
5.7MB
-
Sample
240615-jgf6vaselg
-
MD5
ad5bdd1c6153ec560dbcab6ea2480cc8
-
SHA1
64122057af227adef74589ed1d97ae9c4f84b9ec
-
SHA256
304631f00c0d5fd54a67f810de0e3d43159ba713f41e1c2394bd3e9e69e3691a
-
SHA512
cf20d7b5d562f7d45187b3eeaa555e2cb3576aa0da9384e38c8e71b5a4d2e260d8ae309cda7dcba939fc5f8a1aabcd8224ce071d65d8ad4beb4dd4a84635687c
-
SSDEEP
98304:hyXDbbsbaz7MSwGqnq8R4QZXobhZKo28U48H0ldTo35Uc8jL:hyTsbSHw4kXK/2948H0lZs5Xe
Behavioral task
behavioral1
Sample
ad5bdd1c6153ec560dbcab6ea2480cc8_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
gdtad.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral3
Sample
gdtad.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral4
Sample
gdtad.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
-
Target
ad5bdd1c6153ec560dbcab6ea2480cc8_JaffaCakes118
-
Size
5.7MB
-
MD5
ad5bdd1c6153ec560dbcab6ea2480cc8
-
SHA1
64122057af227adef74589ed1d97ae9c4f84b9ec
-
SHA256
304631f00c0d5fd54a67f810de0e3d43159ba713f41e1c2394bd3e9e69e3691a
-
SHA512
cf20d7b5d562f7d45187b3eeaa555e2cb3576aa0da9384e38c8e71b5a4d2e260d8ae309cda7dcba939fc5f8a1aabcd8224ce071d65d8ad4beb4dd4a84635687c
-
SSDEEP
98304:hyXDbbsbaz7MSwGqnq8R4QZXobhZKo28U48H0ldTo35Uc8jL:hyTsbSHw4kXK/2948H0lZs5Xe
Score8/10-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
-
-
Target
gdtad.jar
-
Size
56KB
-
MD5
5e6545246b1a8310b35bc96bc736e548
-
SHA1
8744e88d615d0218b294a3919634ed99292ed40a
-
SHA256
abcdcfaaec6a6e6778b1226b6dd41f708785999431bfd32a4ebbd2e12a8b3e20
-
SHA512
b5352a8aa365b4c50710e287793e873c445467f0b796bc80105a299f62e295e4c29a894dd18067e0a6edd65f061130aac87803ba6bcdad6bb6819009b8746b1a
-
SSDEEP
1536:XycitfPEGerAgzp9cSUynK1wNEnJh7GL7Z/PA5CaHnX:Xycit0GyzpKknYJhKL7C5vX
Score1/10 -