General

  • Target

    eea0168a93f6576da0d7f53d59d85b83_JaffaCakes118

  • Size

    32.0MB

  • Sample

    240920-3ar5bateje

  • MD5

    eea0168a93f6576da0d7f53d59d85b83

  • SHA1

    f7616b6dac697f4a2b974bf9e427a2e96be9e265

  • SHA256

    32b8d34c0ee46f0aeee7f83f5b2d7cc59ac678dab3109f4ac85dda16ab331cce

  • SHA512

    94647f7b9b9abac347f72c9eb3353ddd086ed7db07bef973851d6aa26cc05199814066dd903b102a41a628d5c88eee985a89ccdc757c6f5eb04a04f4ad829973

  • SSDEEP

    786432:SSXZ5bl8dSnJvrGbnONUYKckH3wWnW8IMKufOCxhy1P:DZRpGKNUf3H3wWnW8FK8x8

Malware Config

Targets

    • Target

      eea0168a93f6576da0d7f53d59d85b83_JaffaCakes118

    • Size

      32.0MB

    • MD5

      eea0168a93f6576da0d7f53d59d85b83

    • SHA1

      f7616b6dac697f4a2b974bf9e427a2e96be9e265

    • SHA256

      32b8d34c0ee46f0aeee7f83f5b2d7cc59ac678dab3109f4ac85dda16ab331cce

    • SHA512

      94647f7b9b9abac347f72c9eb3353ddd086ed7db07bef973851d6aa26cc05199814066dd903b102a41a628d5c88eee985a89ccdc757c6f5eb04a04f4ad829973

    • SSDEEP

      786432:SSXZ5bl8dSnJvrGbnONUYKckH3wWnW8IMKufOCxhy1P:DZRpGKNUf3H3wWnW8FK8x8

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks