Overview

overview

10

Static

static

10

e87a0e15a9...18.apk

android-9-x86

8

e87a0e15a9...18.apk

android-10-x64

8

e87a0e15a9...18.apk

android-11-x64

8

Analysis

  • max time kernel
    62s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    08/04/2024, 21:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
  • Size 15.3MB
  • Sample240408-1hh59scf22
  • SHA256 919407b73a55683df2089ef62d9902e532cdda36b7c591609fb52ec3f9cc8341
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
collectiondiscovery

Malware Config

Signatures

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

    collectiondiscovery
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • ir.sast.ghazae.khoshmaze.veje.deabeteha.d
    1⤵
    • Requests cell location
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5058

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        3f794c2c-dd83-40a6-a823-959e8435febc.jobs
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/3f794c2c-dd83-40a6-a823-959e8435febc.jobs
        • Size 869B
        • SHA256 180205554c378714e22206ef2297231ad07e342d7494e99eaf84f633612f0db1
        • MD5 SHA1 SHA512
        Submit Download

        45bb1d23-4070-43f4-b07a-f9224114ddfa.jobs
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/45bb1d23-4070-43f4-b07a-f9224114ddfa.jobs
        • Size 278B
        • SHA256 4e0b521f35c1aa38e1744cf7dfa049bad8acb20738d28cb4ce8b5eab249d0a21
        • MD5 SHA1 SHA512
        Submit Download

        670a6a92-6624-4008-aa26-5842cccafcc6.jobs
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/670a6a92-6624-4008-aa26-5842cccafcc6.jobs
        • Size 179B
        • SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
        • MD5 SHA1 SHA512
        Submit Download

        69d44395-e4cb-4355-8278-cf376801d450.jobs
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/69d44395-e4cb-4355-8278-cf376801d450.jobs
        • Size 176B
        • SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
        • MD5 SHA1 SHA512
        Submit Download

        efb93dba-5f93-464b-957f-9cfc58b38113.jobs
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/efb93dba-5f93-464b-957f-9cfc58b38113.jobs
        • Size 1KB
        • SHA256 c0159358f2ef1ab5de0ecba688195fca84ee989cd34ba40ead8fafb84bdeaa9a
        • MD5 SHA1 SHA512
        Submit Download

        __pushe_base_lib_db
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db
        • Size 24KB
        • SHA256 e0f80f20552389e404df0a13281db6e64b51e3635ca24fffc31b9d4f0335f0d8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db-journal
        • Size 512B
        • SHA256 1ae8994c934897ed29be884f7daf3c1681216d00c3ed39d9635be1dbd06bb439
        • MD5 SHA1 SHA512
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 3b54491988718ee6eb167add4814c7315f4d1516f080cbc326b1fa24c1a0708a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 78d582da14d3eb8effb3d7807a67ed2ca7fdcfc0549c4d39dc0b804736512440
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 8e114e4bd89c8fc398899c14eb48851ba2f91d0bd091ac7962f984faf2bf2d96
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 c3d57e8894dae0ea15412f63cbfc24d0ba9639a6d0fa668a0e1e7afe1fe8a3bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/__pushe_base_lib_db-journal
        • Size 24KB
        • SHA256 0efe1df78b74870f3b4a168964cd5a3fddf1a54dacbf458476637bb61581d58a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb
        • Size 20KB
        • SHA256 c1af588ae69975e53effe6165a9b41e0734b7201e8bf9bce75ead9973f1e9bfa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb
        • Size 20KB
        • SHA256 2091f6363e84582845c8e476d1daebbcc43502beac2f709d18783cb07e708d48
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb
        • Size 24KB
        • SHA256 4f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb-journal
        • Size 512B
        • SHA256 7e6c6ab653e370db7e1ae62a873f76b358bcfc9f2e90657180d2444577c40a2b
        • MD5 SHA1 SHA512
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb-journal
        • Size 8KB
        • SHA256 b8823bed9d74d80e66c67c76aae0383323cc977c65dbf7ef02bb65b8c560290f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb-journal
        • Size 8KB
        • SHA256 9396e69cf5a95885366447388d1b99206c56e2b621b10e664f15f47fe7618c7a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb-journal
        • Size 8KB
        • SHA256 f51cc3d4788874a8583d8a723212a7862a1dd75bef1a7cc165f5f1befc4d9a72
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb-journal
        • Size 12KB
        • SHA256 a2897e2d3dd4398e1b2059a7ee05b81137fcbf01834409a1571ae88e59da79cb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/cheshdb-journal
        • Size 12KB
        • SHA256 486ddfd4bf1208d76e7bb1cea2cac1a9a7ff13642f4412346f212a3c584fc005
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager
        • Size 28KB
        • SHA256 cf82b6758bdd872525eac2c0060886978fe8560b170a4139dd782dec03c439c1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager-journal
        • Size 20KB
        • SHA256 9c06470fe53969c7a787f5743425dc0ee7d3307f4f03eb635cc5337b2284795d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager-journal
        • Size 512B
        • SHA256 ff276de396c394e09440e08a70fc4e62089af3bb2e22536ed639f4a8b46d25b7
        • MD5 SHA1 SHA512
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager-journal
        • Size 8KB
        • SHA256 d8ea52b4a1b319537a1457457025148d8ec4c6d6bb9afcb558a4713057b21380
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager-journal
        • Size 8KB
        • SHA256 3268f2bd7b15ad89487cd107ab679503aa258a76145119ee858d9dce9a437ee1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager-journal
        • Size 12KB
        • SHA256 37bec85c739b629c8a00134a4575ca7f9bec03da68fb5aa8e12c9a0746d6406d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/db_default_job_manager-journal
        • Size 20KB
        • SHA256 6dfd7e8dc37efab44b6b888e713b158d94ac5a93cfaeb56c9a1f2dee73a9d3c0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 2d0b865fa35224941a7bfcb02d42a30a1e32b5bb8f042965138ece1f761e6afc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 1c2dfa45e2e789334d1b042844e418aceda8851e7313eec0c544987c3ff436d0
        • MD5 SHA1 SHA512
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 f10ea040cf989bd827c8c14f3f298d000b9905ea239714ded1866d2b83a34212
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 3976d8881b9c4ced4eb4073822ac4b13fc93510799a2c175f457c793fe9a42a7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 d385ee25860c31a802fd9f2c118ddcf8acbc0510ea3f890985844b13ded66fb0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 c6600cda688c74d8c72a8c6802e4e95eb7bcc9516e3cf07b8e6b81fb69b9ef30
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 68d7bd4b40d29c2d43a048b86f868bff347e5dff12abeb352f3759ee74b64cad
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 8a2c818e75e943335cbe6b84dd1a9d266b18c1e94cced8eb234895e70224265d
        • MD5 SHA1 SHA512
        Submit Download