General
- Target b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118
- Size 31.4MB
- Sample240616-wtcemsvfnp
- SHA256 58e314d493f47dbc0cb3e0119af6e50c20d74875b10619004c5b05be437f51f8
- MD5 b4814bb1ea12d80bda667e35e3e19a64
- SHA1 937234a2ec76c66d482244b21e11cd7f793e898d
- SHA512 695ad83528f94baa30f5d4e8cf6264433fc00e0a14fd1eb8f26e0383b868b5966cb1c44630c04b29e7c4d15a9c62773adb602145d20935464c028fca19dec4ed
- SSDEEP 786432:Q9IPvYarG5au3BoqbmCRtNQkkNE1fSG1HdPkqg6QS9XhuUt2F:QadLuRFbmCRwQSA5S6h9XhuUtm
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral3
Sample
mimo_asset.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
mimo_asset.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
mimo_asset.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
- Target b4814bb1ea12d80bda667e35e3e19a64_JaffaCakes118
- Size 31.4MB
- SHA256 58e314d493f47dbc0cb3e0119af6e50c20d74875b10619004c5b05be437f51f8
- MD5 b4814bb1ea12d80bda667e35e3e19a64
- SHA1 937234a2ec76c66d482244b21e11cd7f793e898d
- SHA512 695ad83528f94baa30f5d4e8cf6264433fc00e0a14fd1eb8f26e0383b868b5966cb1c44630c04b29e7c4d15a9c62773adb602145d20935464c028fca19dec4ed
- SSDEEP 786432:Q9IPvYarG5au3BoqbmCRtNQkkNE1fSG1HdPkqg6QS9XhuUt2F:QadLuRFbmCRwQSA5S6h9XhuUtm
- MD5 SHA1 SHA512 SSDEEP
Score8/10Checks if the Android device is rooted.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Queries the phone number (MSISDN for GSM devices)
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
Queries information about active data network
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the unique device ID (IMEI, MEID, IMSI)
-
- Target mimo_asset.apk
- Size 390KB
- SHA256 011c400d36773b3b475290c2d1af5a829c0597c24dfbb10e12222611a4e1300e
- MD5 39692de7ff0848e54bf6ea1ce9ece672
- SHA1 bf6299d772f195bac724f738c49cdac0c538abe4
- SHA512 3ea7d8e4a85e1b8b7759984f817df7c65656d057e31b11ec1a970e79a99b775fca5e5f8ef942f99869a14b58a91c1a5838b5711ac33f915cf8f7f77280bcadc6
- SSDEEP 12288:hNx7RUQtEAQ5YXCA3xfDX2O9THkIMFsTTX5KOk5O:57RUQt35XCA3xz2O9TEJy3XIOkw
- MD5 SHA1 SHA512 SSDEEP
Score1/10