General
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.ff.c0b41bf9bc1087db34e6fe626f15ddb7
- Size 3.8MB
- Sample261015-dclmwaew2x
- SHA256 ad1c496cb61871cb72063587199816eb2e5e67dbbd8b8ec656c2d10c7fe3f3a4
- MD5 c0b41bf9bc1087db34e6fe626f15ddb7
- SHA1 78903bc565234349c208a7ce9388d93c091768d3
- SHA512 e0d8869d083c9aa2cb3b02e06e21fdcb3314db6e6bc3c40fbe09eaaf05255e827c776fd39f2562bb6273b50a4ad112cc89f9515fee6c12c2faeca74a83db3a8d
- SSDEEP 98304:xa+Ycgkc7KlLgXJ//WcAn6yUd41N3j/zCSPZzT9O:syhcccZXZG6/41Ni4T4
- TLSH T1CF06225FE61DB827D4AFFB32C7723047E82D08444629F7A7566AE1144EF3AD09206F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.ff.apk
Resource
android-x86-arm-20260325-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.ff.apk
Resource
android-33-x64-arm64-20260708-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.ff.c0b41bf9bc1087db34e6fe626f15ddb7
- Size 3.8MB
- SHA256 ad1c496cb61871cb72063587199816eb2e5e67dbbd8b8ec656c2d10c7fe3f3a4
- MD5 c0b41bf9bc1087db34e6fe626f15ddb7
- SHA1 78903bc565234349c208a7ce9388d93c091768d3
- SHA512 e0d8869d083c9aa2cb3b02e06e21fdcb3314db6e6bc3c40fbe09eaaf05255e827c776fd39f2562bb6273b50a4ad112cc89f9515fee6c12c2faeca74a83db3a8d
- SSDEEP 98304:xa+Ycgkc7KlLgXJ//WcAn6yUd41N3j/zCSPZzT9O:syhcccZXZG6/41Ni4T4
- TLSH T1CF06225FE61DB827D4AFFB32C7723047E82D08444629F7A7566AE1144EF3AD09206F26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Conceal Multimedia Files
1Virtualization/Sandbox Evasion
2System Checks
2