General
- Target JaffaCakes118_2aa2ef7d1aaff618e9025f875289fced
- Size 18.3MB
- Sample250831-ysyycsvrv6
- SHA256 dde08cfc9b12fbb2ffcccfac3cdec6cf3a06436c57d493b1112f320e48c7ecfa
- MD5 2aa2ef7d1aaff618e9025f875289fced
- SHA1 e9afb47e9bf387bf6bb68f005da6efcf865cf486
- SHA512 f399ba341f60771048fab1230bc2c2953f25124fb24f4162a74bcee6adee576efcaf831aeb3e89c81fef7c1bb80a3f1c657c1543b391bd67b4e4f8811ea9fd8a
- SSDEEP 393216:Byp7hWRpPAr42ZAkK9xtbLY/YGGNR/JKolLUceYsNw16L:q0+4A/K9w/DER/JKsAlYgv
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
JaffaCakes118_2aa2ef7d1aaff618e9025f875289fced.apk
Resource
android-x86-arm-20250619-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
redhook
C2
-
tablet
Targets
-
- Target JaffaCakes118_2aa2ef7d1aaff618e9025f875289fced
- Size 18.3MB
- SHA256 dde08cfc9b12fbb2ffcccfac3cdec6cf3a06436c57d493b1112f320e48c7ecfa
- MD5 2aa2ef7d1aaff618e9025f875289fced
- SHA1 e9afb47e9bf387bf6bb68f005da6efcf865cf486
- SHA512 f399ba341f60771048fab1230bc2c2953f25124fb24f4162a74bcee6adee576efcaf831aeb3e89c81fef7c1bb80a3f1c657c1543b391bd67b4e4f8811ea9fd8a
- SSDEEP 393216:Byp7hWRpPAr42ZAkK9xtbLY/YGGNR/JKolLUceYsNw16L:q0+4A/K9w/DER/JKsAlYgv
- MD5 SHA1 SHA512 SSDEEP
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current nearby Wi-Fi networks
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
-
Requests cell location
Uses Android APIs to to get current cell location.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
MITRE ATT&CK Mobile v16
Defense Evasion
Execution Guardrails
1Geofencing
1Virtualization/Sandbox Evasion
1System Checks
1