General

  • Target

    b669d10db658e10bd1cec584ea463f11_JaffaCakes118

  • Size

    29.2MB

  • Sample

    240617-c6ewrazhra

  • MD5

    b669d10db658e10bd1cec584ea463f11

  • SHA1

    8c2dfcf60d32c8c842f0fb5ad88d104468506b2d

  • SHA256

    ddf900d7f4b19d9cc1ebc064be4c00085e711a6f786e36964ac724b7b2a28971

  • SHA512

    7a89890379f64bb31ef9e0b247bd489474e7e13d2eb1dd821efc2ba509604a4de0369fe3dff8b2c36fa330830ed6bbb17f4e47c89b54673b2281faf3192932c5

  • SSDEEP

    393216:T1mBvttEbEfdX+4vhlMdsfPmtH/KC8048NR+mjaU1r/3Ez5XDddl:xmBvtCbEVX+4rCKC805PBfCz7l

Malware Config

Targets

    • Target

      b669d10db658e10bd1cec584ea463f11_JaffaCakes118

    • Size

      29.2MB

    • MD5

      b669d10db658e10bd1cec584ea463f11

    • SHA1

      8c2dfcf60d32c8c842f0fb5ad88d104468506b2d

    • SHA256

      ddf900d7f4b19d9cc1ebc064be4c00085e711a6f786e36964ac724b7b2a28971

    • SHA512

      7a89890379f64bb31ef9e0b247bd489474e7e13d2eb1dd821efc2ba509604a4de0369fe3dff8b2c36fa330830ed6bbb17f4e47c89b54673b2281faf3192932c5

    • SSDEEP

      393216:T1mBvttEbEfdX+4vhlMdsfPmtH/KC8048NR+mjaU1r/3Ez5XDddl:xmBvtCbEVX+4rCKC805PBfCz7l

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks