General

  • Target

    2597b16d324688faae158aab304c2c77_JaffaCakes118

  • Size

    2.0MB

  • Sample

    241008-z5n5cs1fnb

  • MD5

    2597b16d324688faae158aab304c2c77

  • SHA1

    4865d06e4bca4ff504f77e07871af85e0599293b

  • SHA256

    44c15f337cdf4dbc1e6d5d9130affb0457829d6d6c686ea8ead73f24eee5f37c

  • SHA512

    d319dca5cf3c5f9298e7ad59c5be1b548687d5f7945606490fa9f6ffe4ad482b85849aa15482fb34e97a69e50a6bc6219861630ec1ec94df048493e08c8cd680

  • SSDEEP

    49152:oNvxwS6Ju7aHYrb1vsDFZZTSG7Cx1JHEA+R:oJxZVJvsDTwG7Cx1Jkd

Malware Config

Targets

    • Target

      2597b16d324688faae158aab304c2c77_JaffaCakes118

    • Size

      2.0MB

    • MD5

      2597b16d324688faae158aab304c2c77

    • SHA1

      4865d06e4bca4ff504f77e07871af85e0599293b

    • SHA256

      44c15f337cdf4dbc1e6d5d9130affb0457829d6d6c686ea8ead73f24eee5f37c

    • SHA512

      d319dca5cf3c5f9298e7ad59c5be1b548687d5f7945606490fa9f6ffe4ad482b85849aa15482fb34e97a69e50a6bc6219861630ec1ec94df048493e08c8cd680

    • SSDEEP

      49152:oNvxwS6Ju7aHYrb1vsDFZZTSG7Cx1JHEA+R:oJxZVJvsDTwG7Cx1Jkd

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks