General

  • Target

    b5becbdb6d1647b01c6a1cb200921e41_JaffaCakes118

  • Size

    13.6MB

  • Sample

    240616-3ggxxstcnc

  • MD5

    b5becbdb6d1647b01c6a1cb200921e41

  • SHA1

    14531736f8210fede73419afb69291fa7dc425cc

  • SHA256

    5091899aa2b2683cd6b51dcbdce74ad5793b19c2e88a6e223839fffc5419d040

  • SHA512

    809b292426835cf4b5feb09a82b3094a484569d01ab12bc9b1af3ffdf4bd5c771e9ef6243cd33f060fd55f3f035bb79c5716d174b95fc8b35396c06fa5cb6088

  • SSDEEP

    393216:f/QnV+3lce3fVjfa1uAROHomsIttMWotthBTpRC:f/QnV+qgf41uA8HomTLMBbhBTa

Malware Config

Targets

    • Target

      b5becbdb6d1647b01c6a1cb200921e41_JaffaCakes118

    • Size

      13.6MB

    • MD5

      b5becbdb6d1647b01c6a1cb200921e41

    • SHA1

      14531736f8210fede73419afb69291fa7dc425cc

    • SHA256

      5091899aa2b2683cd6b51dcbdce74ad5793b19c2e88a6e223839fffc5419d040

    • SHA512

      809b292426835cf4b5feb09a82b3094a484569d01ab12bc9b1af3ffdf4bd5c771e9ef6243cd33f060fd55f3f035bb79c5716d174b95fc8b35396c06fa5cb6088

    • SSDEEP

      393216:f/QnV+3lce3fVjfa1uAROHomsIttMWotthBTpRC:f/QnV+qgf41uA8HomTLMBbhBTa

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Reads information about phone network operator.

    • Checks the presence of a debugger

    • Target

      gdtadv2.jar

    • Size

      230KB

    • MD5

      33aeb27eefc5ae7838f01186e27d8816

    • SHA1

      2a7ef64266577916f05cc841c9f977ca8a34568f

    • SHA256

      c6a8f2838c910a50b56bddad227ebed00b8b32a6869a432c83964b1150ad2c59

    • SHA512

      ebd8ccc5750aa1c2a28e849149d0ef3d1c997479008a803a931ea10c82bd99d90797a99329690cbea6cbc18d45bbe481a5576abfe3ca8afc96dbb3974a0e00c5

    • SSDEEP

      6144:B8Obhi9RAdTKqZVGee8QXMLzKb/n4BQk+m:BbhiTAEQeVsWrn4BUm

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks