General

  • Target

    7006badb610092b37ba2f5456cef7ed5_JaffaCakes118

  • Size

    3.9MB

  • Sample

    241023-vys3hstepn

  • MD5

    7006badb610092b37ba2f5456cef7ed5

  • SHA1

    10ac45a06da7f8b8b6fa69d2146bf6dbd300b04b

  • SHA256

    a87800163781ee1a169e78404fa052d551ff013bc06e1850084d46099712d291

  • SHA512

    70ae6085aaeb3a53c35bd572937650981df030156f7510abec1f44460e6254cb382ab9649c6903664c762cc6b5225832d9c7ac32d65ecce376661846c32e9eb4

  • SSDEEP

    98304:WzFbsnyb7Qkd27OMFSSracTeKi802D/AaJzYdyfKH:Wz1sEfd6ZESrp02D/Zzy4Q

Malware Config

Targets

    • Target

      7006badb610092b37ba2f5456cef7ed5_JaffaCakes118

    • Size

      3.9MB

    • MD5

      7006badb610092b37ba2f5456cef7ed5

    • SHA1

      10ac45a06da7f8b8b6fa69d2146bf6dbd300b04b

    • SHA256

      a87800163781ee1a169e78404fa052d551ff013bc06e1850084d46099712d291

    • SHA512

      70ae6085aaeb3a53c35bd572937650981df030156f7510abec1f44460e6254cb382ab9649c6903664c762cc6b5225832d9c7ac32d65ecce376661846c32e9eb4

    • SSDEEP

      98304:WzFbsnyb7Qkd27OMFSSracTeKi802D/AaJzYdyfKH:Wz1sEfd6ZESrp02D/Zzy4Q

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks