General

  • Target

    8902435bc7932b0b757a39887b3badb4_JaffaCakes118

  • Size

    3.7MB

  • Sample

    241103-b3ldpa1jhv

  • MD5

    8902435bc7932b0b757a39887b3badb4

  • SHA1

    83a1dfef000d9bd606c44dc7900c9ee2b1a61e51

  • SHA256

    34507f17b236de22b7a70ffd7cd43764931422a3b44bda05352e96d0c36fcd6b

  • SHA512

    ececea7247f36728e29f74dc97ebd254204c601d7b7c72bb3b19bca3f1926bbbca74cf118b0cc4dc09142465da62c99c8c5093541c3c55182589e9ad089451c0

  • SSDEEP

    98304:4iZkJp9koUk2QGD/hF8nGC+4vm//Bg0QU5mAUfXAgCiOe26W:V4UTQGtFTffJgPARqO

Malware Config

Targets

    • Target

      8902435bc7932b0b757a39887b3badb4_JaffaCakes118

    • Size

      3.7MB

    • MD5

      8902435bc7932b0b757a39887b3badb4

    • SHA1

      83a1dfef000d9bd606c44dc7900c9ee2b1a61e51

    • SHA256

      34507f17b236de22b7a70ffd7cd43764931422a3b44bda05352e96d0c36fcd6b

    • SHA512

      ececea7247f36728e29f74dc97ebd254204c601d7b7c72bb3b19bca3f1926bbbca74cf118b0cc4dc09142465da62c99c8c5093541c3c55182589e9ad089451c0

    • SSDEEP

      98304:4iZkJp9koUk2QGD/hF8nGC+4vm//Bg0QU5mAUfXAgCiOe26W:V4UTQGtFTffJgPARqO

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the content of SMS inbox messages.

    • Reads the content of the SMS messages.

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

    • Target

      JPlugin.apk

    • Size

      329KB

    • MD5

      d3f805abb95cf31a5caf5297254685ca

    • SHA1

      79617fbe5ccd437fff6f8358c577f8671f5fa453

    • SHA256

      a2deda75d7abaad23a558b43bb7678cebd59b09011f9dc03c71b01c8b1ca0c41

    • SHA512

      535ca8c4b0368832592953697f945f1d9e452ed62a64b7854de19121e315ae016b529e156690fdacd7b7f5d8df289994f20c95c91e8694218a7663424e0ec40a

    • SSDEEP

      6144:qQW7u+fX7XPJOWYwE3Z4HTu/kwa48OMeyZZISL+DH85BD1zoL:QhP7f0wE3Zou/D8OM/ZXL2H85BD1zY

    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks