General
- Target b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118
- Size 31.4MB
- Sample240616-wtcemsvfnp
- SHA256 58e314d493f47dbc0cb3e0119af6e50c20d74875b10619004c5b05be437f51f8
- MD5 b4814bb1ea12d80bda667e35e3e19a64
- SHA1 937234a2ec76c66d482244b21e11cd7f793e898d
- SHA512 695ad83528f94baa30f5d4e8cf6264433fc00e0a14fd1eb8f26e0383b868b5966cb1c44630c04b29e7c4d15a9c62773adb602145d20935464c028fca19dec4ed
- SSDEEP 786432:Q9IPvYarG5au3BoqbmCRtNQkkNE1fSG1HdPkqg6QS9XhuUt2F:QadLuRFbmCRwQSA5S6h9XhuUtm
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
mimo_asset.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
mimo_asset.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
mimo_asset.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
- Target b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118
- Size 31.4MB
- SHA256 58e314d493f47dbc0cb3e0119af6e50c20d74875b10619004c5b05be437f51f8
- MD5 b4814bb1ea12d80bda667e35e3e19a64
- SHA1 937234a2ec76c66d482244b21e11cd7f793e898d
- SHA512 695ad83528f94baa30f5d4e8cf6264433fc00e0a14fd1eb8f26e0383b868b5966cb1c44630c04b29e7c4d15a9c62773adb602145d20935464c028fca19dec4ed
- SSDEEP 786432:Q9IPvYarG5au3BoqbmCRtNQkkNE1fSG1HdPkqg6QS9XhuUt2F:QadLuRFbmCRwQSA5S6h9XhuUtm
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
- Target mimo_asset.apk
- Size 390KB
- SHA256 011c400d36773b3b475290c2d1af5a829c0597c24dfbb10e12222611a4e1300e
- MD5 39692de7ff0848e54bf6ea1ce9ece672
- SHA1 bf6299d772f195bac724f738c49cdac0c538abe4
- SHA512 3ea7d8e4a85e1b8b7759984f817df7c65656d057e31b11ec1a970e79a99b775fca5e5f8ef942f99869a14b58a91c1a5838b5711ac33f915cf8f7f77280bcadc6
- SSDEEP 12288:hNx7RUQtEAQ5YXCA3xfDX2O9THkIMFsTTX5KOk5O:57RUQt35XCA3xz2O9TEJy3XIOkw
- MD5 SHA1 SHA512 SSDEEP
Score1/10