General

  • Target
    b669d10db658e10bd1cec584ea463f11_JaffaCakes118
  • Size 29.2MB
  • Sample240617-c6ewrazhra
  • SHA256 ddf900d7f4b19d9cc1ebc064be4c00085e711a6f786e36964ac724b7b2a28971
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      b669d10db658e10bd1cec584ea463f11_JaffaCakes118
    • Size 29.2MB
    • SHA256 ddf900d7f4b19d9cc1ebc064be4c00085e711a6f786e36964ac724b7b2a28971
    • MD5 SHA1 SHA512 SSDEEP
    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks