General

  • Target

    bc1ddb68e117c8e58b76a831d10149f0_JaffaCakes118

  • Size

    13.9MB

  • Sample

    240618-qf1mesvdqb

  • MD5

    bc1ddb68e117c8e58b76a831d10149f0

  • SHA1

    4c32e8e7cd024283a34ddaf7a0b924b13057efc2

  • SHA256

    e671d45bebf6bfef657a11bc89cfe161920d0c874858c111c207a2c3376094ba

  • SHA512

    386cca6d893619ce8c1ddde5cdd69b4edbce36ed2cb57504d3502645a6c766334b0f2798c30e6bbf7ee5788a30025942903a0c3d1ba6d2aea5002aecbd278ab9

  • SSDEEP

    393216:LPbpz2umiamdFi8m4m0qhdkJzfWitMkYsxghh7KOJ:rbd2u51i8+GJLWYlYsIT

Malware Config

Targets

    • Target

      bc1ddb68e117c8e58b76a831d10149f0_JaffaCakes118

    • Size

      13.9MB

    • MD5

      bc1ddb68e117c8e58b76a831d10149f0

    • SHA1

      4c32e8e7cd024283a34ddaf7a0b924b13057efc2

    • SHA256

      e671d45bebf6bfef657a11bc89cfe161920d0c874858c111c207a2c3376094ba

    • SHA512

      386cca6d893619ce8c1ddde5cdd69b4edbce36ed2cb57504d3502645a6c766334b0f2798c30e6bbf7ee5788a30025942903a0c3d1ba6d2aea5002aecbd278ab9

    • SSDEEP

      393216:LPbpz2umiamdFi8m4m0qhdkJzfWitMkYsxghh7KOJ:rbd2u51i8+GJLWYlYsIT

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks