General
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Davitor.a.80249a4cf9f8b5d0b8e2a28d2f8e23aa
- Size 9.4MB
- Sample261015-c98y1aev8v
- SHA256 2cf1a2cf4e87a253d5fb23eeef9ca6747c0e4229b6886dbda04cd70a8b08a67d
- MD5 80249a4cf9f8b5d0b8e2a28d2f8e23aa
- SHA1 1cdf1c5975985ef7bb7b74707dca78d707d3ac0f
- SHA512 211f53d32ade76f9290e44ea525aaa03a3abf8ff6ec1f2bb5d7d5632adea72a765ea13b32ee91ae33ae5ca789e9c9f392bae95908a2c1231ab13efacaacd2b1f
- SSDEEP 196608:dtT5qB0Cg0AjjnJBUsDREPh3t8P4u5bFrnd:ja03hnvf+Pz8PvTd
- TLSH T131A6339263B9E418F5B78B304E7EC6A1E9733C852516D6CD382A77466EF76C09B20313
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Davitor.a.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Davitor.a.apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Davitor.a.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Davitor.a.80249a4cf9f8b5d0b8e2a28d2f8e23aa
- Size 9.4MB
- SHA256 2cf1a2cf4e87a253d5fb23eeef9ca6747c0e4229b6886dbda04cd70a8b08a67d
- MD5 80249a4cf9f8b5d0b8e2a28d2f8e23aa
- SHA1 1cdf1c5975985ef7bb7b74707dca78d707d3ac0f
- SHA512 211f53d32ade76f9290e44ea525aaa03a3abf8ff6ec1f2bb5d7d5632adea72a765ea13b32ee91ae33ae5ca789e9c9f392bae95908a2c1231ab13efacaacd2b1f
- SSDEEP 196608:dtT5qB0Cg0AjjnJBUsDREPh3t8P4u5bFrnd:ja03hnvf+Pz8PvTd
- TLSH T131A6339263B9E418F5B78B304E7EC6A1E9733C852516D6CD382A77466EF76C09B20313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)