General

  • Target

    d525214b95bb35052deebb0ba3ab9f5f_JaffaCakes118

  • Size

    9.2MB

  • Sample

    240908-1pcbaszaqf

  • MD5

    d525214b95bb35052deebb0ba3ab9f5f

  • SHA1

    a8bcbcf13b9aa5ba535c0edc4fa1bf8556dc58b3

  • SHA256

    f894b36ea4c36674e46503dc2d2fc4929d97f960d7b7424507e17b328a10a2cf

  • SHA512

    adaa94a0fdcfafff3b1d87377ba2b688dd4a19980c4e5f3ef88529b2e36703c0fb61d19110d782aeed1b4d86317b621e927ca043ea88d9e0bf82ae3ba56e356f

  • SSDEEP

    196608:8hAKHlccAe18cQCFP36iCobxJUdB7VQobxJkdxrVeobxJud9TVJ:8h8FEPqyMdBRDcdxhZWd9pJ

Malware Config

Targets

    • Target

      d525214b95bb35052deebb0ba3ab9f5f_JaffaCakes118

    • Size

      9.2MB

    • MD5

      d525214b95bb35052deebb0ba3ab9f5f

    • SHA1

      a8bcbcf13b9aa5ba535c0edc4fa1bf8556dc58b3

    • SHA256

      f894b36ea4c36674e46503dc2d2fc4929d97f960d7b7424507e17b328a10a2cf

    • SHA512

      adaa94a0fdcfafff3b1d87377ba2b688dd4a19980c4e5f3ef88529b2e36703c0fb61d19110d782aeed1b4d86317b621e927ca043ea88d9e0bf82ae3ba56e356f

    • SSDEEP

      196608:8hAKHlccAe18cQCFP36iCobxJUdB7VQobxJkdxrVeobxJud9TVJ:8h8FEPqyMdBRDcdxhZWd9pJ

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks