Overview

overview

7

Static

static

6

06905f2bcd...18.apk

android-9-x86

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    06905f2bcd897905026747ff04a98aec_JaffaCakes118

  • Size

    29.2MB

  • Sample

    241001-t5zm7stcje

  • MD5

    06905f2bcd897905026747ff04a98aec

  • SHA1

    7b5a8769bb3eb342a40f6eff2006dfffbc64d6bf

  • SHA256

    75c26426cbc5f81c46f90954d2125fc6986c0279f4d8c1d2e52bcd30bf157c56

  • SHA512

    eaa493005238b8c92a08dcbb361fc0f305d0701ea8e988ff2dba1ad30e11716a93986f69d1f867248a09e78fd6b469981a5b0b00c95ee8ef69c7aaeae832e5b1

  • SSDEEP

    786432:g7xjshA3fxFF2VNCLnjfZbNNwUNJvXgZCkYdT3KxYFwWIfUR+E2r:u9BIVNu1JJoZwdT6xYFwWIfUR98

Score
7/10
androidcollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      06905f2bcd897905026747ff04a98aec_JaffaCakes118

    • Size

      29.2MB

    • MD5

      06905f2bcd897905026747ff04a98aec

    • SHA1

      7b5a8769bb3eb342a40f6eff2006dfffbc64d6bf

    • SHA256

      75c26426cbc5f81c46f90954d2125fc6986c0279f4d8c1d2e52bcd30bf157c56

    • SHA512

      eaa493005238b8c92a08dcbb361fc0f305d0701ea8e988ff2dba1ad30e11716a93986f69d1f867248a09e78fd6b469981a5b0b00c95ee8ef69c7aaeae832e5b1

    • SSDEEP

      786432:g7xjshA3fxFF2VNCLnjfZbNNwUNJvXgZCkYdT3KxYFwWIfUR+E2r:u9BIVNu1JJoZwdT6xYFwWIfUR98

    Score
    7/10
    collectiondiscoveryevasionimpactpersistence

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks