General

  • Target

    302afcaf752e4556ac3538949f0dd671_JaffaCakes118

  • Size

    6.6MB

  • Sample

    241010-q2khbsycje

  • MD5

    302afcaf752e4556ac3538949f0dd671

  • SHA1

    06a7709ad99f3d88063079b8c12ec2c30fef9057

  • SHA256

    c933ddd319da46d85bc26a7d3afd4595c5afe16aaf38380d4cb7d6debf532c5f

  • SHA512

    0368447748fc36682640629037aa9d7b286b70cc8d0339f7098666a6370da1b877894bd04365ecfb51f98f865531db55948d88647d5a73ea5b482ac6e0cd78a1

  • SSDEEP

    196608:Kva4un9zzWcpzg066Wby3wfQ0kFHXBnD6kMSEmYl98VrF:ka4u9zzWog4J32VkFHxD61mYqF

Malware Config

Targets

    • Target

      302afcaf752e4556ac3538949f0dd671_JaffaCakes118

    • Size

      6.6MB

    • MD5

      302afcaf752e4556ac3538949f0dd671

    • SHA1

      06a7709ad99f3d88063079b8c12ec2c30fef9057

    • SHA256

      c933ddd319da46d85bc26a7d3afd4595c5afe16aaf38380d4cb7d6debf532c5f

    • SHA512

      0368447748fc36682640629037aa9d7b286b70cc8d0339f7098666a6370da1b877894bd04365ecfb51f98f865531db55948d88647d5a73ea5b482ac6e0cd78a1

    • SSDEEP

      196608:Kva4un9zzWcpzg066Wby3wfQ0kFHXBnD6kMSEmYl98VrF:ka4u9zzWog4J32VkFHxD61mYqF

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v15

Tasks