4a847e0b1d6412fa165f3adaa4caf7d2579fbf2ea5269e11258c83302f53b0c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c001ecfb382375162336eb7de45c55b8_JaffaCakes118
Size

3.5MB
Sample

240825-frhkwawdje
MD5

c001ecfb382375162336eb7de45c55b8
SHA1

7c50fa459c544082733c815c10628335cb949b3c
SHA256

4a847e0b1d6412fa165f3adaa4caf7d2579fbf2ea5269e11258c83302f53b0c0
SHA512

b76347059548ba3d8afe2fc5498ce817d054d67593dbfe6f364e1e1bab8e602c47a049ca19ae9e3f4495423257cefb76b139c7061a23af68d4fd424a3295055b
SSDEEP

98304:8jydfJP1Sewf4w9kWvVfm3ALsifcPjEhVSk3HszAY27Wtz8nkVP:jX0ePmVeTif0EhVSYszO7W58kVP

Score

6^/10

android discovery impact

Malware Config

Targets

- Target
  
  c001ecfb382375162336eb7de45c55b8_JaffaCakes118
- Size
  
  3.5MB
- MD5
  
  c001ecfb382375162336eb7de45c55b8
- SHA1
  
  7c50fa459c544082733c815c10628335cb949b3c
- SHA256
  
  4a847e0b1d6412fa165f3adaa4caf7d2579fbf2ea5269e11258c83302f53b0c0
- SHA512
  
  b76347059548ba3d8afe2fc5498ce817d054d67593dbfe6f364e1e1bab8e602c47a049ca19ae9e3f4495423257cefb76b139c7061a23af68d4fd424a3295055b
- SSDEEP
  
  98304:8jydfJP1Sewf4w9kWvVfm3ALsifcPjEhVSk3HszAY27Wtz8nkVP:jX0ePmVeTif0EhVSYszO7W58kVP
Score

6^/10

discovery impact
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryimpact