Analysis
-
max time kernel
62s -
max time network
145s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
08-04-2024 21:38
Behavioral task
behavioral1
Sample
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
e87a0e15a9f9c7d6c74e72cdaf1108dd_JaffaCakes118.apk
-
Size
15.3MB
-
MD5
e87a0e15a9f9c7d6c74e72cdaf1108dd
-
SHA1
e7b8937b8b2585924925fe074473d635b0c877f5
-
SHA256
919407b73a55683df2089ef62d9902e532cdda36b7c591609fb52ec3f9cc8341
-
SHA512
62ae380edfa781b47da3d0721f3fca306a67b4fdd3a7954444487892b0e1ab89a525c0e5adb5128132e892426b504c7c6ce125338c7b65dc318c5e1c6dcf8f00
-
SSDEEP
393216:P2kQ7Ge3/SIV8D3r13bxsrXIJoJl/AqaIv+EC3Iiuv5fUjoJk4Gb:eP7Ge31V8jr1rxWYyboqHq3IbRIoJ3Gb
Malware Config
Signatures
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
Processes:
ir.sast.ghazae.khoshmaze.veje.deabeteha.ddescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.sast.ghazae.khoshmaze.veje.deabeteha.d Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.sast.ghazae.khoshmaze.veje.deabeteha.d -
Acquires the wake lock 1 IoCs
Processes:
ir.sast.ghazae.khoshmaze.veje.deabeteha.ddescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.sast.ghazae.khoshmaze.veje.deabeteha.d -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
ir.sast.ghazae.khoshmaze.veje.deabeteha.ddescription ioc Process Framework API call javax.crypto.Cipher.doFinal ir.sast.ghazae.khoshmaze.veje.deabeteha.d
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/0ebaddaf-c3ee-4ecd-ad21-2b7179343cbb.jobs
Filesize1KB
MD5a60c3308b6d579ba1fedcf99efe4f1e9
SHA17ceee16127c2f43064a2fafa26f4c965c491fefa
SHA2569212e414fd8fe4dc39b8eef7b810c61e7ff65b359e3c27112df63b79254867b0
SHA512075a7c89bc69ac9ae98678c222ad97ae5e190c777864fa104c768b486fe80ff009e3e2dad06dd9e9719007974733e773e09c7b4f32c69a6a306885899589efd2
-
/data/user/0/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/42d0bc8e-5498-4c43-a117-8e894af772a7.jobs
Filesize176B
MD5f56f328eea1d5c96a1b96dbbf59488df
SHA1440c784cacff61932e2f61580b7cfdc3a4943c95
SHA25690949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA51236e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb
-
/data/user/0/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/43fa54c0-8df0-4946-acd4-a00dc42e70b0.jobs
Filesize278B
MD5580a98743152a222dd1601a83d9374ad
SHA11c5cf18f1806fbd7c64dccc69cb32b547984d895
SHA256374f1d9a58a901dffe143a4da5d3a16ea21b32398f50ecba3ee4a44a87fe5732
SHA512824849c3a309d01e0a6c771dcfb8a3b88b5b8a13990e1052370fff092821e0d096a577401c4ddb69e7ddc8fce4878b765e677c83a870191c4889fb4d544511a7
-
/data/user/0/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7a3fd140-4c16-44c0-84de-d3d6c6a6cc5b.jobs
Filesize179B
MD5ac58f99a1b179d71e8621412ad31c6a1
SHA1b51fdad95876f5615735c2ab411031ff67d5e946
SHA2569537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b
-
/data/user/0/ir.sast.ghazae.khoshmaze.veje.deabeteha.d/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/a60abdf6-701e-4019-851d-59fbbb535770.jobs
Filesize869B
MD5cb395189935d3481954620d5e55fbf32
SHA1aa9f049832e5729319ad0e84c34baf53f210418a
SHA25613d467ca7ce219709a6a9c1110d6c86a47412e8303d1a0ccb800aa1e3687c135
SHA512cc13abe1106d70326e32b14208347a9cc77df6ac1a21961833228023c15b9a98117fb70ab673d61600f99a1162406e6ff30218351fa29db244e8f9ab65975080
-
Filesize
24KB
MD518d4cc377b974f97633394f7419e05f5
SHA1ab2465de15f15c3a5d5d56eb5fcfc922c624ecfe
SHA256e4216704e89117044b1bbac148c3e8d9e1964d79a16232ef39d9f8f7bcf99152
SHA512bf7d8bb5fff6c737b97e384d40256ad0c28b436fd2e8dfe3a39e5480dcef48cab8f1b7511e9f33a2060ff635e422c5d7de151ea628a7c1aa14ce786b001453bd
-
Filesize
512B
MD589625cddfb1c2cb3f375caacce2d565d
SHA1cca917fb56e122838dde5537dba10b97781ffaec
SHA256b31b82c054d1804ac4e34af562813020d3a473dd792a74356f0d73571a670ca8
SHA512a26cc656263089105f68ac8b77c3de37da37579035698974f7b7025446533b60a66c336698724179f9ab59399908ee15a7fafa373055772a521c129d20725256
-
Filesize
8KB
MD569f5cc8dec5497e71adeffc19c3fb994
SHA141549473033e364252a27d5e1b879ea417ba6348
SHA2564f48554a0c193faf94b6f614e56ddaabf49d074c13545cc4ad087709cf3838a3
SHA512e883490a528022ba442020bd0cead1bd8eba8a110c5e96fbcf0a2fe54a302b80036b2ea4055efd0dc00743b1cd78d6e13f22ccdf22ec5f46a6aa40c3f7774f63
-
Filesize
8KB
MD571943e7f7a51f8d2e64db3c61f59da9e
SHA1cd18d7aed5d393717f7f161ea1b4a46cd6dc3841
SHA2561157f547d30cc8287c48acc2b26b58a5b871ccaedb835261492e7634f73a790f
SHA512901dfc5616a4989f8b548015aea61fe0df8c459c963afc99540f4a9dfba17ab0873f03b01b1622ea0daa694881d65425f196a78424dee2ae4d27ea28aee81210
-
Filesize
8KB
MD5f7c62f2cca6aef4e8bd33d8adb6935b4
SHA14b25821e6004856eea747dba9a4965e0c814d669
SHA2562435a7c360cdcfa9758abf070b4aa1274aa0364862c87df0de99978d3fc48a02
SHA51208a9ffa0f766b849175669bcdb667b1592ac00b7e2a9f61db13399f0cf33eaa3cb379bff42f300b45deba14956aa5c3dc55ecc928aed50d2d34daec6040e0c02
-
Filesize
8KB
MD57d4f4bceb0af496a075dec9e773298f2
SHA1c3f70ebf5ce98ffa563056087bb58d1594f0c7b5
SHA256eb904e08014700f5d5787150c621a37347c584497473170e87d47fd03209d7da
SHA512662105b3dc91ffac17069c16fe9969aa5f34a356d1280dd54ce784e2738445e2664c363c2af2edb856c8a5c97df07632116eae97ed19c639e3ad0ba84b3402f5
-
Filesize
24KB
MD5f727124d93d58eef85c7dca39e3a9310
SHA16c9a1ce23a6bb111ef8ebb0b55d23329d84fb670
SHA2562f943a9a5e45a2a210493385e6da297395e0e06ad6060bd925b7776b7e454ff2
SHA512ed5735eb26935702de3a9715b6f0cdbf59e4aff272807fcd7698de91312812e996bfa525b1de45172305bedacedec1cf21414c0d588fd8ae3b9206ec2c23f8fc
-
Filesize
20KB
MD5e11f7babfc03266ba8a5d46ec9350d6e
SHA1013f0090710df145ceb61dd78b2445e352818b0c
SHA2560a70a67215e3a386ec5a4fcf8c203b37cbc7a6104dc30a53ec6ca7299a82b87d
SHA512590c59f54ec175cf3e4257463e1e93074b1a16f53df8967831950495b8279a600f1006a4a404e9916a69936fb89d265bd8eb46c116480a92a9e74ef2ab23e131
-
Filesize
20KB
MD5edc458ead402054d5b100f0a8f113590
SHA1eb3921ac457872020cf4748c97f18d77bd765eda
SHA256d266b4ee4b3981505b2157dceddae3af91a4054ae49744f1b6c78f134891dc2e
SHA512286d5351273f976cb6d04676a3c970405d8cc56a0ae17f21bcf5b3ab32380fcddae35f1910bd624750e93fb12102f42f99ad9c4f3c184a5d5a534d2087406793
-
Filesize
24KB
MD50660d3ef5f0245096a9fa0f61d6a8666
SHA1282222362a5a05e3153b7f6b49ef35c667b19542
SHA2561091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
SHA51218bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7
-
Filesize
512B
MD5f089a65f6fb4e7c764569ea28ea85f64
SHA11005bd84a625a9af8aa2dbe6df8fe84d84f1b8af
SHA256b0c1e3ca019a10586b0c20c41be88bdcca42c62989e24c1b0c4d83f22949a3eb
SHA512af9a93917eff736280076922d3098f899fb522fd55c1baf7cc134f9ab44e6a8ef00bc7379deb824d952df1f46e2b15e37af3a6ff52a6a36657405abd4da25706
-
Filesize
8KB
MD5f0b744cac3603a31b00d6fa3ec457a40
SHA15f303de32a4ccb3a0e7209dbfe0351db05518a72
SHA25664762f96619552ff86d89db0e6e0064ed8e93b4fd5dbf89d3e1429f4a348ae58
SHA512c64439740a9e05736d993863294bdfa84213cbdfba733339416fd360feb57dbabd2e81f3cf819b4417ebe93c52dcc36929533e06e2862faeaf07ae00315ea76b
-
Filesize
8KB
MD51c2d89f583e80ff371f0411074bc7a53
SHA1fbf1680ce03f83a951629b095b3e316a50b3d1d5
SHA256434c65c8048481b1f5201d8756aaad40409d5e598010ad973330bc0c41da6fbf
SHA512dba6eb8555138b43685b702d7ef12dfb306befa915024654c5c393a3e6396f7a9b4af1112a7086a5d863d970fdf00eab2a6563960ea3716f767b3ab786cb3c19
-
Filesize
8KB
MD5d82239829f5c2169e6499600b5f8fbef
SHA105170f5f0d3aec88ba502bc7b487487315f2080d
SHA2569c8599e5c3d757fa2367d3991a8615e8ba00e1e59c81a8e5e763b92b7f834c63
SHA512e9c55b2409d9695afdff6bc46d6210e7745d99e7df417b6e67e0644313898e489a8e7f430d6bbb3c11b610488fb3c94fb336fd885a9e92c636a7fc2f90831f61
-
Filesize
12KB
MD521cf95b24ff9d55dd1da6369b1992f2c
SHA1accbe15dee3fed65dc6d86a34772b0c9b3a83ff9
SHA25624408c411fa0214aa644daea920b402c72a96e6cad9671a35d474a06252ca5a6
SHA512f96a41a4120046c716dff01812f6a2050b3cc48024b5f64a8f753bed807b9b86dbb77b2725f5ee59bb92a4dbfc46dd4d10d747d47bb866995ded54d2b1ddb6ad
-
Filesize
12KB
MD55aa24bc7cee4e1c0f6197548b6c6450b
SHA1758f0357723550a104282df20dcb140785c3e6e0
SHA256b65f4bc91cbe2aa10b51d28025aabb4eeb137f6566f36d409b9fb00ac2880960
SHA5125ec4024fbf22bd6be002dc4a386e9a50225e22144005dc8c6be40c8cfeeafbbfc133fce04ab05d060b3b576be7599ba612b748dfeed85c40725757920f1f1301
-
Filesize
28KB
MD59000a27583e7083745d853ea082ab3ae
SHA174d9135b80ea483ae876c2670300086d1646dd2a
SHA256c96efaff60100dd321f142480869a2213f76bba72bfbf03da48f9c96d15565ba
SHA512a7d8d46203c84b49973d1afc119b7ccf04ee6dd82d16942d9389333b4e6d9a8ca1a799863d8faee7193df3b4a143ad818bf6391d040fc0f8d45dc5b796d7a292
-
Filesize
20KB
MD5d9eaccd0ae7bd78d8009f3ce0103166d
SHA14d7b204662ebb9a1c8a11f66886009374dbba154
SHA256f18eaebd2a4b98f58509d00fd3d291807d816f46f0adcb796dbc893f2b99ccf0
SHA512d09d7932efc79eab4ffa8c90c4e319dbe995318306fe1a00b25b2da74e337099f14c8893c051d2a30e6b42a55744f2e98daf44131e2bb1cb0394b9bc530d8143
-
Filesize
512B
MD5546541a2ab2d60cb74c02ff7d83fbc5d
SHA15a1af09f6d26093460816868ade15fa3f349978a
SHA256240260bb4feca996d16d2085c769ec4ecb81fcede13c25106bb916d7e6f25b5a
SHA51284676629568dc0635f21f1cf8d097acd4d1432437a6486d2fe713a3fce5983c83efc1c8d9aa5953e9ec5a23f786a5905114c58ffe9f2a73b4bf453033544a93c
-
Filesize
8KB
MD5e0d16a92caf6cb6a255154e3b03549ed
SHA161df10b21263059671a48a7ff3ef9a6e0dd205fd
SHA25626a6ee2ccbfd1bbe66ae10121b4e3fd8670d38da0acae513ae580b14f92eb006
SHA51254cc71a28f6fda7718239da06103548ea573e72baac3c2e0f1868cd9f8e1f683238541aba0ca53c70b7686ce6102c0f1e89e3810a264001348f4aa9874039c83
-
Filesize
8KB
MD5c4bbc7df82e421879b84532fa1fd6414
SHA152d766a9efebb4bc336267c7fa237070f69f2348
SHA256dd09b1c11da4bdf3947299b02da1387facc97a713aed9ddab5395da0e49ec533
SHA5126ee04948d934f90120e3fc12a11e7ecd8ab6dcdfa53ea40baff22d6bc81ad3f647167af937efc3f5bd8788611506b94431ddc6205c764467b094a8b33c2abd95
-
Filesize
12KB
MD5c81101b7f6de873799fc529d62faa856
SHA105ada328c86f981b1fa50e6dc483fc3c9c499b6b
SHA25691f839525ab9a730d4c4ecac7c91c0281f72ca088b61f3c072e5741cf4c867cb
SHA5120ad3123a0417ca881622a0fb843a0e41c16259c41f4edb142835c1142ba8c8b23e19dc2f21022ffe96c2ff801c84d0027235177609c2f87c7a441b9b3620f575
-
Filesize
20KB
MD517e13324bf53585d3fcb2e33cd834080
SHA1c6356423e6e96f6d776fb957aae1152828117a0d
SHA2565787b4568f2ff20170159d3547e65bf14f4f2e3b4ee475378e7eefd1b7f750a5
SHA512c90a6371bb7b0cfc4681d217a704b1e980e09873295dbe94377af035f1760b89ac7f0789a17e6e56ce5866aa92f4dec447e778209804f28540652f6120d75765
-
Filesize
16KB
MD5519ce2d81e9c42d53c892f2cc4c4e984
SHA1f004b4291b23d0d1b9ae5d4399ee105fb86092d3
SHA256e97422b6442b2044bd378ce3746b9d3adb6f6ef411793a1f698a05c65e83aa93
SHA512c1783959719cf6af51019cf3862e6b9625b8492d3df1f53b9d318e4493cdb9f604727bf329d1016a2f21866298429125959ac471ac5efabb80aef6f32098b317
-
Filesize
512B
MD5379a7092590218a784306e41eb46b30a
SHA15a17bf56b8888193006f48fe3b4582252bd03aee
SHA256b98a8ece488b3f3b9573a31199c8f89fff035a74e0d63cc7392e8ea9ee2e3859
SHA51214b252692d79dc9459bcd4f7975b434b1563bcaf59c1cb3fc1d32113cbca885bf0aacdea0719b2f9f979b783e7fd2042b119f0195892a18402a03d0ef1454285
-
Filesize
8KB
MD5a04253a3fb4ef81056956273ec2a7506
SHA19087986daa257be4cd41140c94ba64b9a422ced7
SHA2565e7d64a935ca9c6a813d050fd2199d11546705f08b4f0d673491320f27574f7d
SHA51202a7809e163647c18ed73147feb6021ea90e4d6d969272cafb72f79b1163d226ac80909b89d9f7836649d49e75523c4a934443ef8bb9db0365ab7cf38c60dacb
-
Filesize
8KB
MD57fb02961c9adff9cd24b6d97b66a0a1d
SHA111b091c6f2a9b2dd85aa808aef829036856c253c
SHA2563ddc4526a527b1b04f3dcd146afb5d977408fa1883a9bce69fccaf23be52bfd3
SHA512c102530ef3e790a1eedfdabb56b8034e5860a73185c7cfd21e82595ec4e1de4f5d778c239f9b8e96ec4ca80e9b67565947500956d2c28318c3376239360b8203
-
Filesize
8KB
MD55a0a729ce858ddeb056674287fc8a424
SHA15419e717de109a0e54305280e761c4e6074c20f2
SHA256b8fc120c57ce09b702d853431801f265fd86565c8e8a1e7d13efcc1af0e7af45
SHA51293374f1af5d0c33f745ab2c5a339ea582633496e577d8c4cb16dd2738660b979ec3efb6b7eb1aa99702ab420ef830f4260cb75ac77a1b8faa4fbdb105d83a719
-
Filesize
8KB
MD5992a9321966d2d397ab5cff8b7bda9bb
SHA1459c0efbec57a9adc65455d29193ec02f417b63f
SHA25603d58b3f5de2192799e6bb2f81d43bb99a42678419684eb691d1db9353a22a56
SHA5129d69cde0c6e585383b2662bd28767aad112f6c93544fd5ed5433cce702410e335bfd2e95eacd0189053dcfe712de5f6f53d2c4e02883a067d9148a81e4fdf987
-
Filesize
8KB
MD5c9de7c62ed4f8469067222f35c4ff593
SHA1a1bcdfaa0dc3ccdd5382f0999677c2ccc37e00f6
SHA2568abe2a04f07fc516cae64258c811e7b24e69ba78fa13d9e645e59835a3ba50ba
SHA51285c8d210c831a5078abd9f1633a01dd259c211097ea21c70e4e3542becb4c3a0417af60c82a6f1eaa5066547d7c19d6532c7a8b08c53f1870e216b36ec989d30
-
Filesize
2KB
MD57a7ba9d6d7e9681a722360903c1d25da
SHA12dc1afa0c3c462e72b07da284c8e0b367518f3fd
SHA256c16f2a31f78f3858a60b6a92bc1ee392eb3a377527a87e178dd459bf7c672675
SHA51260e499ff166ff39bd10311686ffadcfaab79856c2e2c55d56bd3a8526135fe91624886f9432efbaa7546ae784a5b4dc05d75a111766ede64687c85957dde94d5