General

  • Target

    06a8135c11c873c04a3919aace3c75c7_JaffaCakes118

  • Size

    3.0MB

  • Sample

    241001-vmv3qsvbmg

  • MD5

    06a8135c11c873c04a3919aace3c75c7

  • SHA1

    693838fdd81ad35990695efa07f9f005d36796ef

  • SHA256

    2ea0243299aa9caf03534c90f0d7868093db0097e6912076f00dd8a10aa5046d

  • SHA512

    a160b660ffbb5d729b15f0d9a3310cec925c5c47ffbdce11eceb504e2cae5574e7084801f4bab1a7e526cd54163d88664632adec4382db9865889afd96984e0c

  • SSDEEP

    49152:v5CbzepPKt63sxtuCXxTurvEtxplFeoiT01w6TFxe/g5ddd:v5UzgKjtuCXx5m/Q1nTFkGdv

Malware Config

Targets

    • Target

      06a8135c11c873c04a3919aace3c75c7_JaffaCakes118

    • Size

      3.0MB

    • MD5

      06a8135c11c873c04a3919aace3c75c7

    • SHA1

      693838fdd81ad35990695efa07f9f005d36796ef

    • SHA256

      2ea0243299aa9caf03534c90f0d7868093db0097e6912076f00dd8a10aa5046d

    • SHA512

      a160b660ffbb5d729b15f0d9a3310cec925c5c47ffbdce11eceb504e2cae5574e7084801f4bab1a7e526cd54163d88664632adec4382db9865889afd96984e0c

    • SSDEEP

      49152:v5CbzepPKt63sxtuCXxTurvEtxplFeoiT01w6TFxe/g5ddd:v5UzgKjtuCXx5m/Q1nTFkGdv

    • Checks if the Android device is rooted.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks