General

  • Target

    f9c3a6b70be682c1f9cd0d2b5d675382_JaffaCakes118

  • Size

    14.5MB

  • Sample

    240927-fqknvazbjg

  • MD5

    f9c3a6b70be682c1f9cd0d2b5d675382

  • SHA1

    7c703421cc7e5831d38f520c61df2a2f53aa7e2a

  • SHA256

    e430b2cea8fd90c8800c4d3284fa6b8ed8c2ce49ff4012c7ed3df5edb7fc57e6

  • SHA512

    6365e6d5e42efc15b24a03e90c518d08a983624900c8ff52abecbac2865b47600a9ab9f131fdf79ddcf41978e5adf550d9032f0a1440684dec082641060a3336

  • SSDEEP

    393216:4UW9whLGsfUPPwRy2hKomqUlwv+ktbUugUyQSMglZ:4k8s8nwRy2kvq4wFKQQr

Malware Config

Targets

    • Target

      f9c3a6b70be682c1f9cd0d2b5d675382_JaffaCakes118

    • Size

      14.5MB

    • MD5

      f9c3a6b70be682c1f9cd0d2b5d675382

    • SHA1

      7c703421cc7e5831d38f520c61df2a2f53aa7e2a

    • SHA256

      e430b2cea8fd90c8800c4d3284fa6b8ed8c2ce49ff4012c7ed3df5edb7fc57e6

    • SHA512

      6365e6d5e42efc15b24a03e90c518d08a983624900c8ff52abecbac2865b47600a9ab9f131fdf79ddcf41978e5adf550d9032f0a1440684dec082641060a3336

    • SSDEEP

      393216:4UW9whLGsfUPPwRy2hKomqUlwv+ktbUugUyQSMglZ:4k8s8nwRy2kvq4wFKQQr

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks