General

  • Target

    ec1cd736f6409e9a04419fa5e5fa6c83_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240919-yy5m4ayalh

  • MD5

    ec1cd736f6409e9a04419fa5e5fa6c83

  • SHA1

    c82c823740a7f89e0fa04c1a046e8068f6995069

  • SHA256

    8df34222bdef80e67161425dcd1b52390ebd8f4a16b30773ed52de879819a1a3

  • SHA512

    d5b502490ab4fe5399d548573b19d0045765875aedb57d6217cca3737c68a42cb608672f7f7952bb23439e2c1a114ca3d2b6e2fd2ea14691d9fcb229f7d78d9c

  • SSDEEP

    98304:WZg5lWeInAQhYYzPYzP+GMJAYiU0LCRmKTGRmKz:WW5lWna+2MyYYgTsz

Malware Config

Targets

    • Target

      ec1cd736f6409e9a04419fa5e5fa6c83_JaffaCakes118

    • Size

      3.3MB

    • MD5

      ec1cd736f6409e9a04419fa5e5fa6c83

    • SHA1

      c82c823740a7f89e0fa04c1a046e8068f6995069

    • SHA256

      8df34222bdef80e67161425dcd1b52390ebd8f4a16b30773ed52de879819a1a3

    • SHA512

      d5b502490ab4fe5399d548573b19d0045765875aedb57d6217cca3737c68a42cb608672f7f7952bb23439e2c1a114ca3d2b6e2fd2ea14691d9fcb229f7d78d9c

    • SSDEEP

      98304:WZg5lWeInAQhYYzPYzP+GMJAYiU0LCRmKTGRmKz:WW5lWna+2MyYYgTsz

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks