General
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.2e3508df54347eaf1c8d5
- Size 3.2MB
- Sample261015-dba5raev9t
- SHA256 2bada6ba786f32af4f310c52c836782949efea6f29fe8931f0615b7c4ff64edd
- MD5 fe27959bcd82e3508df54347eaf1c8d5
- SHA1 1f8e537cfb59b6e371733bef5e52fdb2496ebe97
- SHA512 f299ae5311473a6ae3b0f56dd186f1b149621f3994cde086cc6e0a9989797b047f2bd79a9a89557f96dd42a6f530be9c5edf7fb3987677e566664f5a50270490
- SSDEEP 98304:3ijBkkvkuJSHix6eBMcaTnG+Vgxcn4sEC/7g6sBSqZ/:SlV8uQCxbSG+AATg5XZ/
- TLSH T117E51286F366B816C4F7C23A92B56372711DCC558787FB9F0688B7782AFB4D84904AC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.2e3508df54347eaf1c8d5
- Size 3.2MB
- SHA256 2bada6ba786f32af4f310c52c836782949efea6f29fe8931f0615b7c4ff64edd
- MD5 fe27959bcd82e3508df54347eaf1c8d5
- SHA1 1f8e537cfb59b6e371733bef5e52fdb2496ebe97
- SHA512 f299ae5311473a6ae3b0f56dd186f1b149621f3994cde086cc6e0a9989797b047f2bd79a9a89557f96dd42a6f530be9c5edf7fb3987677e566664f5a50270490
- SSDEEP 98304:3ijBkkvkuJSHix6eBMcaTnG+Vgxcn4sEC/7g6sBSqZ/:SlV8uQCxbSG+AATg5XZ/
- TLSH T117E51286F366B816C4F7C23A92B56372711DCC558787FB9F0688B7782AFB4D84904AC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)