General

  • Target

    b70a906b75a133e5df3d0476c04488b0_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240617-ggpf4sxarh

  • MD5

    b70a906b75a133e5df3d0476c04488b0

  • SHA1

    15302a87b4ea723b931bdba2c07c171a70ae21ce

  • SHA256

    1fc629567ce7eb1fd3a983de6ef3f16e3bae903fd335a10fcf0c7ebe8b1719c4

  • SHA512

    8aefb1f110bccd13a7afb0c9d3c6fee979d9ad8ac27d06389bbe9f6c6d1bea901f77d4580e12fc0385f024fdbf8c714a3184919fa0311936a6f76511198a67ba

  • SSDEEP

    49152:wu63AYgxDpBPkziM83ZkIcttJOmVZ/JpnJgsM+BUf51q5iRxVAqZtTG:w7lEBsziMoFc/JV7fnJgshBUf2WxVAqG

Malware Config

Targets

    • Target

      b70a906b75a133e5df3d0476c04488b0_JaffaCakes118

    • Size

      2.3MB

    • MD5

      b70a906b75a133e5df3d0476c04488b0

    • SHA1

      15302a87b4ea723b931bdba2c07c171a70ae21ce

    • SHA256

      1fc629567ce7eb1fd3a983de6ef3f16e3bae903fd335a10fcf0c7ebe8b1719c4

    • SHA512

      8aefb1f110bccd13a7afb0c9d3c6fee979d9ad8ac27d06389bbe9f6c6d1bea901f77d4580e12fc0385f024fdbf8c714a3184919fa0311936a6f76511198a67ba

    • SSDEEP

      49152:wu63AYgxDpBPkziM83ZkIcttJOmVZ/JpnJgsM+BUf51q5iRxVAqZtTG:w7lEBsziMoFc/JV7fnJgshBUf2WxVAqG

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks