General

  • Target
    jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.fr.47f71295ed628115b866eb86719ba201
  • Size 676KB
  • Sample261015-dcsq7aba89
  • SHA256 f468198322f763ff2d9b0d86cac743baf302d31c2c1739275b603033bb8d0798
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Ewind.fr.47f71295ed628115b866eb86719ba201
    • Size 676KB
    • SHA256 f468198322f763ff2d9b0d86cac743baf302d31c2c1739275b603033bb8d0798
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Removes its main activity from the application launcher

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v16

Tasks