General

  • Target
    bcdff66ff0eb2d10a2b64ca08ed7e08e_JaffaCakes118
  • Size 15.6MB
  • Sample240618-twbvsavgnl
  • SHA256 61913c17aeae92e3b3c9812676ab4dc6642bee403717a5a5a5051aaf4a1f2f72
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      bcdff66ff0eb2d10a2b64ca08ed7e08e_JaffaCakes118
    • Size 15.6MB
    • SHA256 61913c17aeae92e3b3c9812676ab4dc6642bee403717a5a5a5051aaf4a1f2f72
    • MD5 SHA1 SHA512 SSDEEP
    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell information.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks