General

  • Target

    27870a5c536a0b021ecfaab6d3602a4a_JaffaCakes118

  • Size

    9.5MB

  • Sample

    241009-agyw8awekb

  • MD5

    27870a5c536a0b021ecfaab6d3602a4a

  • SHA1

    f999a6637559b0f0379304075a5887e2b0a126d7

  • SHA256

    12e9433c963078c3a82bf6b2cf9a445d2289200eb9ae4e486df668d690fc0dd8

  • SHA512

    ae275a22915381f3d883f25cd328ebef54dd8970d7ec0880a1728e9c055cb028657150627e8a933e432073f6c523e272bd34b02d50d9e4dfe2452b5e2fac389c

  • SSDEEP

    196608:/pcNV7qBjND9CsYfZchZrKGUxwNKBCjMqHwMsGQsZiMiJj6:YRq5B9WsVK3wHQMsGv

Malware Config

Targets

    • Target

      27870a5c536a0b021ecfaab6d3602a4a_JaffaCakes118

    • Size

      9.5MB

    • MD5

      27870a5c536a0b021ecfaab6d3602a4a

    • SHA1

      f999a6637559b0f0379304075a5887e2b0a126d7

    • SHA256

      12e9433c963078c3a82bf6b2cf9a445d2289200eb9ae4e486df668d690fc0dd8

    • SHA512

      ae275a22915381f3d883f25cd328ebef54dd8970d7ec0880a1728e9c055cb028657150627e8a933e432073f6c523e272bd34b02d50d9e4dfe2452b5e2fac389c

    • SSDEEP

      196608:/pcNV7qBjND9CsYfZchZrKGUxwNKBCjMqHwMsGQsZiMiJj6:YRq5B9WsVK3wHQMsGv

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks