General

  • Target

    0f0559f2d9c578c83291a5bd0a19e369_JaffaCakes118

  • Size

    8.5MB

  • Sample

    241003-qy43kaycpq

  • MD5

    0f0559f2d9c578c83291a5bd0a19e369

  • SHA1

    1ba100bb15834a07c4053fd019abc2dd45a7f19d

  • SHA256

    604dd39207816222f6b5670ea33b3e30256401f80acf339d5faf481e08f04022

  • SHA512

    fee3a28b6b12c727db486dc77d33544a41ecc2225775832ab694461eac20bb16e62ac6fe2b719a2f40f644eead2706760c282eb1063636249ffe6d4ddaaab6da

  • SSDEEP

    196608:josiAF7e4/9+lbuiOP8P2p4WJJae5Oqa960Cu:jFt7PGb08P+Jl/aw+

Malware Config

Targets

    • Target

      0f0559f2d9c578c83291a5bd0a19e369_JaffaCakes118

    • Size

      8.5MB

    • MD5

      0f0559f2d9c578c83291a5bd0a19e369

    • SHA1

      1ba100bb15834a07c4053fd019abc2dd45a7f19d

    • SHA256

      604dd39207816222f6b5670ea33b3e30256401f80acf339d5faf481e08f04022

    • SHA512

      fee3a28b6b12c727db486dc77d33544a41ecc2225775832ab694461eac20bb16e62ac6fe2b719a2f40f644eead2706760c282eb1063636249ffe6d4ddaaab6da

    • SSDEEP

      196608:josiAF7e4/9+lbuiOP8P2p4WJJae5Oqa960Cu:jFt7PGb08P+Jl/aw+

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

MITRE ATT&CK Mobile v15

Tasks