General
- Target jaffacakes118_0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1.bin
- Size 9.2MB
- Sample260922-lwl2ratarc
- SHA256 0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1
- MD5 f94ad2a34c38d1672d190f02e7f29158
- SHA1 095d3efefd2bf21ba5bab050ae962f6c23cc0196
- SHA512 642f87eacd6174ffda5083b9fe4cac1372f7b6278a1b1c63a57679a3859a3aecd69af9cb93336db53c173d1aa8e8fd59487cef69d290682e637963927b0bb92b
- SSDEEP 196608:cfwLF//gEuUFXno/HwLF//gEuUFXno/QCqgjf3:cG/4Wno/HG/4Wno/Q2jv
- TLSH T176A62371A7E1832BFAB767B0FA33D982156BFC84A42C91487205E07765B7E8853487F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1.apk
Resource
android-x86-arm-20260721-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1.apk
Resource
android-x64-20260721-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
jaffacakes118_0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1.bin
- Size 9.2MB
- SHA256 0f40026a52eb484ac25aced80e829cee681f89ec2543be9ce4f413c43570d6a1
- MD5 f94ad2a34c38d1672d190f02e7f29158
- SHA1 095d3efefd2bf21ba5bab050ae962f6c23cc0196
- SHA512 642f87eacd6174ffda5083b9fe4cac1372f7b6278a1b1c63a57679a3859a3aecd69af9cb93336db53c173d1aa8e8fd59487cef69d290682e637963927b0bb92b
- SSDEEP 196608:cfwLF//gEuUFXno/HwLF//gEuUFXno/QCqgjf3:cG/4Wno/HG/4Wno/Q2jv
- TLSH T176A62371A7E1832BFAB767B0FA33D982156BFC84A42C91487205E07765B7E8853487F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.