General

  • Target
    jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.jb.8ce97f0dd28524c66315ddfd8355c4d1
  • Size 103KB
  • Sample261015-dc448atx3n
  • SHA256 d51ff66c65dfe1bee4f0c96f80d0901ccfb898a13aff3e2c41533a58317fd081
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.jb.8ce97f0dd28524c66315ddfd8355c4d1
    • Size 103KB
    • SHA256 d51ff66c65dfe1bee4f0c96f80d0901ccfb898a13aff3e2c41533a58317fd081
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Removes its main activity from the application launcher

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries the phone number (MSISDN for GSM devices)

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v16

Tasks