General
-
Target
bc72cc8212f463c7992b0430f0419f2b_JaffaCakes118
-
Size
18.0MB
-
Sample
240618-rxzxwssapp
-
MD5
bc72cc8212f463c7992b0430f0419f2b
-
SHA1
8fc34d5164c176cf9ec8bfd31b94af9e98256a04
-
SHA256
cb7826ae840a17e011e87e79cbccfba66e9d1ff20aca1c8aec9c2a60e63b5ca7
-
SHA512
5c4a8fafbfb46273e70ebc2412282a08c0bcf889357c18273a08f06c431a3539aefa58df8b2ec26037f3eb9523ee6f1616698c6e88e431e5ea6345f412e85676
-
SSDEEP
393216:+NKMf1mAplwBcHUcd+r2tF9Ya3g7gf/dgSRYe3uO:+NKMf0ApyqHLF9Twc2SWep
Static task
static1
Behavioral task
behavioral1
Sample
bc72cc8212f463c7992b0430f0419f2b_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
bc72cc8212f463c7992b0430f0419f2b_JaffaCakes118.apk
Resource
android-x64-arm64-20240611.1-en
Malware Config
Targets
-
-
Target
bc72cc8212f463c7992b0430f0419f2b_JaffaCakes118
-
Size
18.0MB
-
MD5
bc72cc8212f463c7992b0430f0419f2b
-
SHA1
8fc34d5164c176cf9ec8bfd31b94af9e98256a04
-
SHA256
cb7826ae840a17e011e87e79cbccfba66e9d1ff20aca1c8aec9c2a60e63b5ca7
-
SHA512
5c4a8fafbfb46273e70ebc2412282a08c0bcf889357c18273a08f06c431a3539aefa58df8b2ec26037f3eb9523ee6f1616698c6e88e431e5ea6345f412e85676
-
SSDEEP
393216:+NKMf1mAplwBcHUcd+r2tF9Ya3g7gf/dgSRYe3uO:+NKMf0ApyqHLF9Twc2SWep
Score8/10-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation)
-
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2