General

  • Target

    6fc3df90a054dede6e0ef2a6cab261da_JaffaCakes118

  • Size

    15.7MB

  • Sample

    241023-thgtwa1arq

  • MD5

    6fc3df90a054dede6e0ef2a6cab261da

  • SHA1

    5aa3b8c6b68aacbc548f52e44331ebdf56682b3b

  • SHA256

    aa7524c3d2ed55e426953a0cab402e4491f5f7f6bf3477ae10a597bb112da449

  • SHA512

    02ca4110d5910e9ebe4cbfc48ff67bce711494435c20750fa13d9db1dac0d93ceed1e7f336dd4544a2bc0d7d803d6abc300c4780ae74afea9b72dea4fb1b697e

  • SSDEEP

    393216:MeX4pUQe1eBd+YkQ7oKg/k5QEoWwZjdXwasixq5:MppJe1U+YkQ7oy5QEoWwZjdAas35

Malware Config

Targets

    • Target

      6fc3df90a054dede6e0ef2a6cab261da_JaffaCakes118

    • Size

      15.7MB

    • MD5

      6fc3df90a054dede6e0ef2a6cab261da

    • SHA1

      5aa3b8c6b68aacbc548f52e44331ebdf56682b3b

    • SHA256

      aa7524c3d2ed55e426953a0cab402e4491f5f7f6bf3477ae10a597bb112da449

    • SHA512

      02ca4110d5910e9ebe4cbfc48ff67bce711494435c20750fa13d9db1dac0d93ceed1e7f336dd4544a2bc0d7d803d6abc300c4780ae74afea9b72dea4fb1b697e

    • SSDEEP

      393216:MeX4pUQe1eBd+YkQ7oKg/k5QEoWwZjdXwasixq5:MppJe1U+YkQ7oy5QEoWwZjdAas35

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks