General

  • Target

    23b61fadd9db6e2ddd8f583bed66ad63_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240703-2nvxpazdjk

  • MD5

    23b61fadd9db6e2ddd8f583bed66ad63

  • SHA1

    3a6b6a6efcf33f33385fc4ae4d2f64aaf767f805

  • SHA256

    3dd068f1665554bddadbe32adcc540d5441de111b38dbb1eeac1c7551a282e71

  • SHA512

    30bad8dbf9f2dddec25bba214207417387551e58cb7c17e239bc0f2718740892c66282e493887ec1b7b83c0ae43fc73bebb7faa7d5fb33efc649473b271154c1

  • SSDEEP

    49152:mXFqPAUfFOb01ijjTrBQIaGKxNOgp3NXBjYl:m2e01C9aGKxNB9XBjYl

Malware Config

Targets

    • Target

      23b61fadd9db6e2ddd8f583bed66ad63_JaffaCakes118

    • Size

      1.6MB

    • MD5

      23b61fadd9db6e2ddd8f583bed66ad63

    • SHA1

      3a6b6a6efcf33f33385fc4ae4d2f64aaf767f805

    • SHA256

      3dd068f1665554bddadbe32adcc540d5441de111b38dbb1eeac1c7551a282e71

    • SHA512

      30bad8dbf9f2dddec25bba214207417387551e58cb7c17e239bc0f2718740892c66282e493887ec1b7b83c0ae43fc73bebb7faa7d5fb33efc649473b271154c1

    • SSDEEP

      49152:mXFqPAUfFOb01ijjTrBQIaGKxNOgp3NXBjYl:m2e01C9aGKxNB9XBjYl

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Matrix

Tasks