General
-
Target
b70a906b75a133e5df3d0476c04488b0_JaffaCakes118
-
Size
2.3MB
-
Sample
240617-ggpf4sxarh
-
MD5
b70a906b75a133e5df3d0476c04488b0
-
SHA1
15302a87b4ea723b931bdba2c07c171a70ae21ce
-
SHA256
1fc629567ce7eb1fd3a983de6ef3f16e3bae903fd335a10fcf0c7ebe8b1719c4
-
SHA512
8aefb1f110bccd13a7afb0c9d3c6fee979d9ad8ac27d06389bbe9f6c6d1bea901f77d4580e12fc0385f024fdbf8c714a3184919fa0311936a6f76511198a67ba
-
SSDEEP
49152:wu63AYgxDpBPkziM83ZkIcttJOmVZ/JpnJgsM+BUf51q5iRxVAqZtTG:w7lEBsziMoFc/JV7fnJgshBUf2WxVAqG
Static task
static1
Behavioral task
behavioral1
Sample
b70a906b75a133e5df3d0476c04488b0_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
b70a906b75a133e5df3d0476c04488b0_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
b70a906b75a133e5df3d0476c04488b0_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
-
Target
b70a906b75a133e5df3d0476c04488b0_JaffaCakes118
-
Size
2.3MB
-
MD5
b70a906b75a133e5df3d0476c04488b0
-
SHA1
15302a87b4ea723b931bdba2c07c171a70ae21ce
-
SHA256
1fc629567ce7eb1fd3a983de6ef3f16e3bae903fd335a10fcf0c7ebe8b1719c4
-
SHA512
8aefb1f110bccd13a7afb0c9d3c6fee979d9ad8ac27d06389bbe9f6c6d1bea901f77d4580e12fc0385f024fdbf8c714a3184919fa0311936a6f76511198a67ba
-
SSDEEP
49152:wu63AYgxDpBPkziM83ZkIcttJOmVZ/JpnJgsM+BUf51q5iRxVAqZtTG:w7lEBsziMoFc/JV7fnJgshBUf2WxVAqG
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-