General
-
Target
fd341958489c25c9ca057de2576d5c5e_JaffaCakes118
-
Size
31.1MB
-
Sample
240928-1l9gmaxekp
-
MD5
fd341958489c25c9ca057de2576d5c5e
-
SHA1
90bdaded39353e5d4b5768ea89b4bdb5b028d826
-
SHA256
436abf7c2172ab01914502092a198898498ba87003d441b8758300d2b2a75fe9
-
SHA512
be6909a8846c8a8d3c58a987d9337046e980ddc995c595c33c1f6ace8279127f6de963808b65e3791b20e91f888b6ad21bd579ad56f5bce132db62c4a47cdf6f
-
SSDEEP
786432:gPW6K3yT+MaoqbmNDNZ+ozw20lRVhmhTs4yS2:rTyKMaFbmG25hIJ
Malware Config
Targets
-
-
Target
fd341958489c25c9ca057de2576d5c5e_JaffaCakes118
-
Size
31.1MB
-
MD5
fd341958489c25c9ca057de2576d5c5e
-
SHA1
90bdaded39353e5d4b5768ea89b4bdb5b028d826
-
SHA256
436abf7c2172ab01914502092a198898498ba87003d441b8758300d2b2a75fe9
-
SHA512
be6909a8846c8a8d3c58a987d9337046e980ddc995c595c33c1f6ace8279127f6de963808b65e3791b20e91f888b6ad21bd579ad56f5bce132db62c4a47cdf6f
-
SSDEEP
786432:gPW6K3yT+MaoqbmNDNZ+ozw20lRVhmhTs4yS2:rTyKMaFbmG25hIJ
Score8/10-
Checks if the Android device is rooted.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
-
-
Target
mimo_asset.apk
-
Size
390KB
-
MD5
39692de7ff0848e54bf6ea1ce9ece672
-
SHA1
bf6299d772f195bac724f738c49cdac0c538abe4
-
SHA256
011c400d36773b3b475290c2d1af5a829c0597c24dfbb10e12222611a4e1300e
-
SHA512
3ea7d8e4a85e1b8b7759984f817df7c65656d057e31b11ec1a970e79a99b775fca5e5f8ef942f99869a14b58a91c1a5838b5711ac33f915cf8f7f77280bcadc6
-
SSDEEP
12288:hNx7RUQtEAQ5YXCA3xfDX2O9THkIMFsTTX5KOk5O:57RUQt35XCA3xz2O9TEJy3XIOkw
Score1/10 -