General

  • Target

    b798a64ed47f7b0f6aaaa0984eba6c0a_JaffaCakes118

  • Size

    8.4MB

  • Sample

    240617-j6edjswcmr

  • MD5

    b798a64ed47f7b0f6aaaa0984eba6c0a

  • SHA1

    2fc918702133205b12090c68b31c572b28f1beb4

  • SHA256

    f3c9141f8443184d342652c6200a40df09ad1432e41327e75caa63d01c8cf020

  • SHA512

    0d9178ddb2a497ff89f1c7293b4a05537eaf93a294f82a54fc4273225e900dad269f24a896359d87f6e1518579196620bd0c590cef58469cb78fc54d51be9d3a

  • SSDEEP

    196608:QzPzIhQBebQ/T/zf4wmdpG6/Jn7+9nhQ6:IPZeM/TLf6Gr9nJ

Malware Config

Targets

    • Target

      b798a64ed47f7b0f6aaaa0984eba6c0a_JaffaCakes118

    • Size

      8.4MB

    • MD5

      b798a64ed47f7b0f6aaaa0984eba6c0a

    • SHA1

      2fc918702133205b12090c68b31c572b28f1beb4

    • SHA256

      f3c9141f8443184d342652c6200a40df09ad1432e41327e75caa63d01c8cf020

    • SHA512

      0d9178ddb2a497ff89f1c7293b4a05537eaf93a294f82a54fc4273225e900dad269f24a896359d87f6e1518579196620bd0c590cef58469cb78fc54d51be9d3a

    • SSDEEP

      196608:QzPzIhQBebQ/T/zf4wmdpG6/Jn7+9nhQ6:IPZeM/TLf6Gr9nJ

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks