General

  • Target
    jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.2e3508df54347eaf1c8d5
  • Size 3.2MB
  • Sample261015-dba5raev9t
  • SHA256 2bada6ba786f32af4f310c52c836782949efea6f29fe8931f0615b7c4ff64edd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.i.2e3508df54347eaf1c8d5
    • Size 3.2MB
    • SHA256 2bada6ba786f32af4f310c52c836782949efea6f29fe8931f0615b7c4ff64edd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v16

Tasks