General

  • Target

    4b865688d34a830cba5e27b527886d55_JaffaCakes118

  • Size

    6.3MB

  • Sample

    241016-fr688stfng

  • MD5

    4b865688d34a830cba5e27b527886d55

  • SHA1

    286806c4359deebac4e1e6bdae0903307a70e6bc

  • SHA256

    9daeb76c6ed0755fb1def41a3838b9fadf54b3683e8dd74629154334017306a2

  • SHA512

    fe3c674f5735359e453d239da2cbc8f5e3364c8833a164534b626ac524c586b27c3c3df04a970ee617ea65b6ab1a02dbab5982a4174deef91a014b53ec8d5ca6

  • SSDEEP

    196608:r0rS15KlKrta5K59yl9xBUcdfL3p29/ML3p29/E:r0aSuwcDyllUyL30ML30E

Malware Config

Targets

    • Target

      4b865688d34a830cba5e27b527886d55_JaffaCakes118

    • Size

      6.3MB

    • MD5

      4b865688d34a830cba5e27b527886d55

    • SHA1

      286806c4359deebac4e1e6bdae0903307a70e6bc

    • SHA256

      9daeb76c6ed0755fb1def41a3838b9fadf54b3683e8dd74629154334017306a2

    • SHA512

      fe3c674f5735359e453d239da2cbc8f5e3364c8833a164534b626ac524c586b27c3c3df04a970ee617ea65b6ab1a02dbab5982a4174deef91a014b53ec8d5ca6

    • SSDEEP

      196608:r0rS15KlKrta5K59yl9xBUcdfL3p29/ML3p29/E:r0aSuwcDyllUyL30ML30E

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks