Analysis
-
max time kernel
62s -
max time network
156s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
08-04-2024 21:38
Behavioral task
behavioral1
Sample
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
-
Size
15.3MB
-
MD5
e87a0e15a9f9c7d6c74e72cdaf1108dd
-
SHA1
e7b8937b8b2585924925fe074473d635b0c877f5
-
SHA256
919407b73a55683df2089ef62d9902e532cdda36b7c591609fb52ec3f9cc8341
-
SHA512
62ae380edfa781b47da3d0721f3fca306a67b4fdd3a7954444487892b0e1ab89a525c0e5adb5128132e892426b504c7c6ce125338c7b65dc318c5e1c6dcf8f00
-
SSDEEP
393216:P2kQ7Ge3/SIV8D3r13bxsrXIJoJl/AqaIv+EC3Iiuv5fUjoJk4Gb:eP7Ge31V8jr1rxWYyboqHq3IbRIoJ3Gb
Malware Config
Signatures
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
Processes:
ir.sast.ghazae.khoshmaze.veje.deabeteha.ddescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.sast.ghazae.khoshmaze.veje.deabeteha.d Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.sast.ghazae.khoshmaze.veje.deabeteha.d -
Acquires the wake lock 1 IoCs
Processes:
ir.sast.ghazae.khoshmaze.veje.deabeteha.ddescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.sast.ghazae.khoshmaze.veje.deabeteha.d -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
ir.sast.ghazae.khoshmaze.veje.deabeteha.ddescription ioc Process Framework API call javax.crypto.Cipher.doFinal ir.sast.ghazae.khoshmaze.veje.deabeteha.d
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3f794c2c-dd83-40a6-a823-959e8435febc.jobs
Filesize869B
MD585081f9c3ebe4c0e99293c1aa4a7322e
SHA155e4cdfff958297bac2dfa3b34209b949f69cc04
SHA256180205554c378714e22206ef2297231ad07e342d7494e99eaf84f633612f0db1
SHA512d4068b5bc46ec17d5902bbc9a3e419f2cd9a91d1f82dd82373eee60f7ce3a9b4fbd892558220c20117c2b3020b3373c41b10ba743a827c7d4cb9df4039d9ef7d
-
/data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/45bb1d23-4070-43f4-b07a-f9224114ddfa.jobs
Filesize278B
MD58c316703dacde3468af6b77b0217f91c
SHA146a437307e2c446129763850377021192bd3fcee
SHA2564e0b521f35c1aa38e1744cf7dfa049bad8acb20738d28cb4ce8b5eab249d0a21
SHA512c18b0bbc5ea6e40d7a4db96a3bedcfda9c9f507b1d2347d6851575406e07e3e113827ecfa0e49149e2d091e4e5e5917f605ecde31bba3886a0282b2d151be8a7
-
/data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/670a6a92-6624-4008-aa26-5842cccafcc6.jobs
Filesize179B
MD5ac58f99a1b179d71e8621412ad31c6a1
SHA1b51fdad95876f5615735c2ab411031ff67d5e946
SHA2569537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b
-
/data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/69d44395-e4cb-4355-8278-cf376801d450.jobs
Filesize176B
MD5f56f328eea1d5c96a1b96dbbf59488df
SHA1440c784cacff61932e2f61580b7cfdc3a4943c95
SHA25690949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA51236e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb
-
/data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/efb93dba-5f93-464b-957f-9cfc58b38113.jobs
Filesize1KB
MD519a7bf007e879fc4dc4f81c8c7b2368d
SHA15b41f05190320bbf9ac4a04d051e40e6017d7754
SHA256c0159358f2ef1ab5de0ecba688195fca84ee989cd34ba40ead8fafb84bdeaa9a
SHA5124af47f9fb0d3e1f5b13592a6690229a9629a5fecd0510306f93c49a517732e8119d7365da033dc08cf758ac4785b986b0ec69b0f1c2114bf390914ffe8364588
-
Filesize
24KB
MD55577b823293eaf278452e9a5a460c94c
SHA1efe227254a9c2efd39948dcae8fa49ee92553e64
SHA256e0f80f20552389e404df0a13281db6e64b51e3635ca24fffc31b9d4f0335f0d8
SHA512e74b032c58efaaa53cc5b9fa33e486fd8e83e3572fa28d642f134006173f62d05a03c7da853ac295fd7b559fd86c459428464d602a2348db762b6b8810c39d04
-
Filesize
512B
MD553fbdafee0d97abec3418f85bbb77084
SHA1a8a063ae02b5a54da7d4206674f278047eb9d99e
SHA2561ae8994c934897ed29be884f7daf3c1681216d00c3ed39d9635be1dbd06bb439
SHA5125b7df252a1ac6fcedd5aad4e266df1e2f93f5a5aa649da935ab00e6eed8744779a5b4a530faa4b8c87c133f06af6a9f6d0005a087c55faa5a1856b0269054203
-
Filesize
8KB
MD5e121b171ef40574bc72c7b52125b9c24
SHA1435f1aaecf3a3b20a7ecafe1846d08ee2eb14c30
SHA2563b54491988718ee6eb167add4814c7315f4d1516f080cbc326b1fa24c1a0708a
SHA512a8175cc490572ff7e4eadd2f22310809b7e57ceb3dfbc47faec699c58925f681a7ebc8d3c33050bb038ced4539ad864beeff9c6e39e8f6b490719678382fdf09
-
Filesize
8KB
MD598bf3e93a58e3d096817acdb705f2cd9
SHA165599b55481f1e8ad2b717778dbf41db83559a35
SHA25678d582da14d3eb8effb3d7807a67ed2ca7fdcfc0549c4d39dc0b804736512440
SHA5126e3068c92a5f552c702912c0decc3182ae08cfcc036fef0397924a444b3262ca8085f113d137dd5ee5a04ab2d43e8e0853de368b4547644168f6728c3f265b01
-
Filesize
8KB
MD5936afbd68d07d300b866f1b910c84c93
SHA13bdfdd22db107d9271ce5e59b34b189de402b374
SHA2568e114e4bd89c8fc398899c14eb48851ba2f91d0bd091ac7962f984faf2bf2d96
SHA51292e708c5096a9dc318cc24b682c3be2fc87470da42d40412a53f863419890fa14a9e3a8ce8e891cbf6f76b7fd34c94907db43db20e9f8e90239ee04aa263431b
-
Filesize
8KB
MD547f182d1664922051ac862a8878127da
SHA1a48494be03468445aa04f97959c1f74ba10166c4
SHA256c3d57e8894dae0ea15412f63cbfc24d0ba9639a6d0fa668a0e1e7afe1fe8a3bd
SHA512157c066727a958aef6aa9fa92b68af5206d1bdb6140933e3ff58c54916dfd461eaba92c33e63fde678184809d68e0c510d5e9d5d11765a6fb41420f2dfa1d7a2
-
Filesize
24KB
MD5b3fae67fb64d61ebd4ad418b3e19dabe
SHA1ccfcdbd13d4925cc7c34723face27513814396c2
SHA2560efe1df78b74870f3b4a168964cd5a3fddf1a54dacbf458476637bb61581d58a
SHA5121f93257052d41bcb74369c1eb3a69988603996dd15ba249cca7ce8df71799f27365f507d715d9660e00eefd65de7d128de903a467948571160dceff34a341227
-
Filesize
20KB
MD5fb734de01b5ac129078188713ebaaff6
SHA10afb681683ba7398dbc0f28d706be00c7c368c4f
SHA256c1af588ae69975e53effe6165a9b41e0734b7201e8bf9bce75ead9973f1e9bfa
SHA512707975d0a1399d2118fdcb24e7cb116100cef5a2b65272813cedeab47b3d33ade79fc2c7f2b35cc707142284ed0600a7dcd83555dc07d9f107b5594e5ba2b9ae
-
Filesize
20KB
MD5ad1ce3a7302f8986b25266546870a05c
SHA1324ac271738b763f0af3939428f8be0387003058
SHA2562091f6363e84582845c8e476d1daebbcc43502beac2f709d18783cb07e708d48
SHA5128b9a72e1994932136a2f1371f96bb624fdaf11d4a2d464d72d6d638b649a7944cd82975d0a1e76905f198b43212ca654c63d099053ef88d197fca90e6371c345
-
Filesize
24KB
MD5259a1e4e7ebc4b0d0341ffcf0c3bc2ea
SHA19b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c
SHA2564f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
SHA512dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313
-
Filesize
512B
MD587585332f24ca7f052e7b975da320292
SHA1d33f5daaed7de415772e2688af161bedd980c954
SHA2567e6c6ab653e370db7e1ae62a873f76b358bcfc9f2e90657180d2444577c40a2b
SHA51213c39bc2e0dc11d8e813f5cfbb137bea1fb81a240488e7e28eef48d97529a9d2c9ddb6a9cfd8ad7303c9ac68c83bd10f6296e2269020fdd93c9c2ab67726d81a
-
Filesize
8KB
MD59f4c35bff2191f4ff12944245c707a96
SHA19a6d78ca9c07502a728a766b9b801ff883e05875
SHA256b8823bed9d74d80e66c67c76aae0383323cc977c65dbf7ef02bb65b8c560290f
SHA5120b687f3a232a0f986254439222f78e35f8cb8d4d7305f8555c96d4b017f7325062aadc3afafca92093ffa139e60027b778504bda1ec7f92aef8af0af5dbeb381
-
Filesize
8KB
MD5c81a7247bdfb40c33520e911549e6d86
SHA12ff6f140bd1f364a857a050f678a8edf134a0232
SHA2569396e69cf5a95885366447388d1b99206c56e2b621b10e664f15f47fe7618c7a
SHA512aa934e4207d5d695d3fd7ab7469cd4fc2aed51b6321d70a558d1cbddf35ec982504c7015cbe564f4c112c0860c27c39da5bb764403d710ed060ecc38e77fae87
-
Filesize
8KB
MD57c485dd974f0abede0c661494e63e0f5
SHA1c2c976e6295be60a5edd6825c398b48787942dde
SHA256f51cc3d4788874a8583d8a723212a7862a1dd75bef1a7cc165f5f1befc4d9a72
SHA512949145f96b8bf91f90accfefe47afc9bd5418a186b7c2b886143529b9c4dcd4f2079b2568c184e0bb747db8bc1312077a5bd4c857b6ebcc7b0f49e7029abd0f3
-
Filesize
12KB
MD59210f37fd00c00d63c53d84652633d44
SHA1a3ac20c197141bb2684add75e95b81711964aaa9
SHA256a2897e2d3dd4398e1b2059a7ee05b81137fcbf01834409a1571ae88e59da79cb
SHA512f03197034f6469f82aeade55c8e48a4f316689f7e83c7f762d50704491bb6c82352fb9ea4e66ddfac7702303037432e16508a310e25ee5157214625c0e546678
-
Filesize
12KB
MD54de0c4b64c9e65e64ade0da6eb3bee56
SHA1297f76bb309e578e63fa7792f670dd307faf14e0
SHA256486ddfd4bf1208d76e7bb1cea2cac1a9a7ff13642f4412346f212a3c584fc005
SHA5128f57e165c4996b8c084a3f92669149653eb4fe3d4b30fc8c9d20966f3b71ac49892090d2216d48d4357d3269a3ddea6f43e44b5c135ce30048190ed5082a395a
-
Filesize
28KB
MD552f3999ab329a3b4b8f6033fa80f3609
SHA170de17b7beae1f338770620e9b7cc232f4bab4e5
SHA256cf82b6758bdd872525eac2c0060886978fe8560b170a4139dd782dec03c439c1
SHA5122defb8035efc52ace0903a8d00ce8f70e0e54a33cbcb9f5bd855718e721b3415ec1f6cf2e639d2b943f5451428ca70be14f8a6e8cc08ce8a46a7464bb950ab86
-
Filesize
20KB
MD5df882a397430fffc9275c14c7a7b92ea
SHA121887295d206775f3dbff4e34e76d53886706e35
SHA2569c06470fe53969c7a787f5743425dc0ee7d3307f4f03eb635cc5337b2284795d
SHA51284350c17fef77de24999c0e57a50da1d335c8fa0ac024d60fb8cf3dc454ae1f0175ba5965b9cbdb5cadd4b0876eff3aba8eabda78bc3f31e9e3f7167d3bb878c
-
Filesize
512B
MD5a9dd88522f36d9af581b33c6db750c80
SHA19c0ff85dad9542f1e406116ff8c1c980fa9336cc
SHA256ff276de396c394e09440e08a70fc4e62089af3bb2e22536ed639f4a8b46d25b7
SHA5128e9a231a16c32a98a0c2702e3cdd859cca2a9d7a3f8d7ae790cdd42659a5e49c9e3725ccab9ad84ea39899fc9e77ccee1ce3d548ffd302a99d019e5c9273d11b
-
Filesize
8KB
MD561783950151f3a8db2cd4ffd9f2ed6ee
SHA129132adfd325b012ced90c96feeb664ab407d4de
SHA256d8ea52b4a1b319537a1457457025148d8ec4c6d6bb9afcb558a4713057b21380
SHA5122a185fbf9e9df310f1bfc6c0ead0e66290a0431d8fe5878b6c091d9093073a7612af73c665fc6a0dbb2ef517017d47fdbceb55db20b78b9dd0282bb0bb61c4e0
-
Filesize
8KB
MD5b6b4254b0c89884835e50a319617bc08
SHA1f181d4b5bb85e9e3870627605d6955c9f0743dec
SHA2563268f2bd7b15ad89487cd107ab679503aa258a76145119ee858d9dce9a437ee1
SHA5123b54b6a6c9842fb27edb36d6329e508ed9e910993cec92da9aa7406365f6dd08a3835a72553b2f80bcafed538c40435580c429f3a1a00bc6148c4816a171d350
-
Filesize
12KB
MD5c53caf31a00e0285799edf5c85a76fbc
SHA13ec96c66c3c99ee89010f9790b371ec09d994dfe
SHA25637bec85c739b629c8a00134a4575ca7f9bec03da68fb5aa8e12c9a0746d6406d
SHA5121cf188a64d36077a1687e720802a66fa792846bab0184025cfda32bcefad5717eee02201aa98a56cfe50bbf5da2980e93f8a1cf4b113a85b6765a733faeafaf4
-
Filesize
20KB
MD58be0aca3d189f19af3c4671aa68a786f
SHA1c6c6390c6969d6678ee45e1a08f11f88b8900651
SHA2566dfd7e8dc37efab44b6b888e713b158d94ac5a93cfaeb56c9a1f2dee73a9d3c0
SHA512179f13eb8ca7e2adafbe2cea73a5bbf0b7357f4fbfaf353050981f894f7a3c2327ca2137acaea8a3884416fdca5c6a40f7ba568574dc91cba946037e1017cad5
-
Filesize
16KB
MD500d2876892f766a0241ffa484aa515f9
SHA1ba6090b5c5f78747f67a3f6dcc3588be4d14efcd
SHA2562d0b865fa35224941a7bfcb02d42a30a1e32b5bb8f042965138ece1f761e6afc
SHA51280444e69621a156a3c3796d5263095a78ffa8c113dedcc241ef3882d1490e58ee83d1e48cc3fbf4c99a94470a16a1bf1942aa89edc1907af8fcb07e4b7052330
-
Filesize
512B
MD52a127356618ef38ed05ac973f4305655
SHA15e36b778b047fca0a06f6be5613fdbb201b5b816
SHA2561c2dfa45e2e789334d1b042844e418aceda8851e7313eec0c544987c3ff436d0
SHA5129aecee16220557065d23a6cb8c2e3c8bad828660ca2e1a15eeca234fdc039adb2236e2c6a4e666be17afdb1730f0ae4ab8aaf5c3408f9d8f126c9ea0050cb6bf
-
Filesize
8KB
MD5ba179016901cafb9ebede4bd47f28034
SHA1cac696558ecfd5a6f4187ce3b7ad28853639c2d9
SHA256f10ea040cf989bd827c8c14f3f298d000b9905ea239714ded1866d2b83a34212
SHA512d69067690c42650b8be8bfc5e786645ba31d3e12ce69d5acf0d1885d9741a5130fe5fe389fc768a02521db4ebf0dd0ffe2f4bb641dca4dbc690db1c3c7f4cbe4
-
Filesize
8KB
MD542aec9605d68cc432048188801f94d53
SHA1a40afdd1fdf85ba98a9effce5fade8c7f098c4ed
SHA2563976d8881b9c4ced4eb4073822ac4b13fc93510799a2c175f457c793fe9a42a7
SHA512694d1af9e81221c08ac5502bcf102df494e80033bbb127700c5dda4137b5e619065b098bc4af74f3cd0f5102024450bbd3b8c3114f0c4b77cddfb5f208bbefd3
-
Filesize
8KB
MD5cf8a2f711d0c4934a7bd4050651d1583
SHA16a2cbdc4da4c8343adc599184e8fc00b8a4fd1ca
SHA256d385ee25860c31a802fd9f2c118ddcf8acbc0510ea3f890985844b13ded66fb0
SHA51241e38090055a430d577d0783c883f88aad431028dcc636462704aa961124e9dc6a5a0cc51a8c9edcfa88b9a0fe9d6371d337ed6570fc154b6b5efb138df8b802
-
Filesize
8KB
MD59efe374264fda1df0ab13e6f9952b9a8
SHA1b8b98e1628ffd0643f48fb700fd382419e11325c
SHA256c6600cda688c74d8c72a8c6802e4e95eb7bcc9516e3cf07b8e6b81fb69b9ef30
SHA5121bdb4ecb62f499e856e85500ab2fa0b102505728af6503ae90dfe463a031190f4ace569553f64163d35c4271ebd695097ffb7275999a574bf35e32bebba83003
-
Filesize
8KB
MD583726eebe864010157e76da289aa1379
SHA11bb0f352223d968cd1f20ea0cdee0e2611e00a2a
SHA25668d7bd4b40d29c2d43a048b86f868bff347e5dff12abeb352f3759ee74b64cad
SHA512a913ebae76c047b92800fe015afb43cd15e5a7e3341006ffc929df3d0dedba012046b3363ccf729c3db462573a406ed82fffccbccf7f22dca7347f915ade76fd
-
Filesize
2KB
MD53abe4e166e4325fab59d2a4c2577d307
SHA19499bc3567d8c9e07bea7f3bc4f2ddb107b91f34
SHA2568a2c818e75e943335cbe6b84dd1a9d266b18c1e94cced8eb234895e70224265d
SHA512761f6b48c103f1bf049a02d6a0c34f2eec467929519856a9532a2a891dfd086d9dcf7e5c4973b4d1da2981482f3212e754acb7c6a118097108c7582d697e2e06