General

  • Target

    2c6b6143c9375f42eb31200211985a59_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241009-g54wpssbkb

  • MD5

    2c6b6143c9375f42eb31200211985a59

  • SHA1

    8d86cc7c46e1203a52bfc6147453e88329e69c7d

  • SHA256

    5a0b701a54c582ccda6a54d923b3c72f0ea6ce96e1d7f256d486166e5fb50c64

  • SHA512

    97052f9e3a8fc20289dfb2a0a51ad29ecc40cd2d5b444307a2234be77e6a9e917373c71d45c1916e5c9cc637b2fd9314dc38104924aab3267dc47ed16f525e0b

  • SSDEEP

    24576:nhE00DUhozwpnmr3DtDAWNfhdfMALARpQ1JNGBk:nhEqhoMpnmr3DBAWffgS/

Malware Config

Targets

    • Target

      2c6b6143c9375f42eb31200211985a59_JaffaCakes118

    • Size

      1.0MB

    • MD5

      2c6b6143c9375f42eb31200211985a59

    • SHA1

      8d86cc7c46e1203a52bfc6147453e88329e69c7d

    • SHA256

      5a0b701a54c582ccda6a54d923b3c72f0ea6ce96e1d7f256d486166e5fb50c64

    • SHA512

      97052f9e3a8fc20289dfb2a0a51ad29ecc40cd2d5b444307a2234be77e6a9e917373c71d45c1916e5c9cc637b2fd9314dc38104924aab3267dc47ed16f525e0b

    • SSDEEP

      24576:nhE00DUhozwpnmr3DtDAWNfhdfMALARpQ1JNGBk:nhEqhoMpnmr3DBAWffgS/

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks