General

  • Target

    040cc51d01565b14cf3c11ab6856256a_JaffaCakes118

  • Size

    1.7MB

  • Sample

    241001-czmm1s1akg

  • MD5

    040cc51d01565b14cf3c11ab6856256a

  • SHA1

    852aa3d23a6711280b38892dde20f7a5d998855b

  • SHA256

    cd0da1005e7943dd81e884ace29271ce64d8907c7889096d14185a774d49fb6c

  • SHA512

    fce5e289b7ee43da1edf7d7ee5f2f3e4ad6c5324b16ee51dd4d231d28dea0db236d092a078f2a6fb92e2cbba79bf6b8a03d65cd8766422a8933c8d63c34376f1

  • SSDEEP

    49152:5gnFp/UXMX15rgSs94CrykT6MbYpxKPH0:5gFp7F5kX9nWkT6mYL7

Malware Config

Targets

    • Target

      040cc51d01565b14cf3c11ab6856256a_JaffaCakes118

    • Size

      1.7MB

    • MD5

      040cc51d01565b14cf3c11ab6856256a

    • SHA1

      852aa3d23a6711280b38892dde20f7a5d998855b

    • SHA256

      cd0da1005e7943dd81e884ace29271ce64d8907c7889096d14185a774d49fb6c

    • SHA512

      fce5e289b7ee43da1edf7d7ee5f2f3e4ad6c5324b16ee51dd4d231d28dea0db236d092a078f2a6fb92e2cbba79bf6b8a03d65cd8766422a8933c8d63c34376f1

    • SSDEEP

      49152:5gnFp/UXMX15rgSs94CrykT6MbYpxKPH0:5gFp7F5kX9nWkT6mYL7

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks