Analysis
-
max time kernel
17s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
26-04-2024 17:06
Behavioral task
behavioral1
Sample
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
-
Size
4.2MB
-
MD5
013f27aedaa260dd3a876637d8094207
-
SHA1
bb7f332e9b752e173a9af2aea6f4a67b1273d366
-
SHA256
71bb4b9db79d5b32cb425e68fe2b6181c1f2dbfd6d9bdb605ce0831abfd2c879
-
SHA512
b7afc034fa9755d2218711798de62c4d52e8ad8356dfa9b3fdb2efc5d09f1419feebde42ba13be1f4baba6231f285056b17f0b12feaef11cbf2bad77d96e3f15
-
SSDEEP
98304:+qU2nTfAEwzbJ4NAkmNutky/bvhmQd4Ac8R4gyIR6mWxq0p:zU2nzA34NUQb74Accyk6mWM0p
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
Processes:
ir.dariadar_iran2018.torshidescription ioc process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.dariadar_iran2018.torshi -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
ir.dariadar_iran2018.torshidescription ioc process File opened for read /proc/cpuinfo ir.dariadar_iran2018.torshi -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
ir.dariadar_iran2018.torshidescription ioc process File opened for read /proc/meminfo ir.dariadar_iran2018.torshi -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
ir.dariadar_iran2018.torshidescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ir.dariadar_iran2018.torshi -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
ir.dariadar_iran2018.torshidescription ioc process Framework service call android.app.IActivityManager.registerReceiver ir.dariadar_iran2018.torshi -
Acquires the wake lock 1 IoCs
Processes:
ir.dariadar_iran2018.torshidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.dariadar_iran2018.torshi
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5c7953f7c0f37a98a641223da648bfeab
SHA15c9fb117e53f02284242f9a21464e843ac8dd5b0
SHA25627a1df11381073c23724a79c9abb8fe1857c8d9bdd9febb2550dd404dc763daa
SHA5120a46292013a1f9469010cf58417cfad3c5da6f0e8b16052e8675f947249df75fba7b8a3cf8f2f0df94fcae9a949fba3673ee162bed4035845cad30f079fbbf3b
-
Filesize
88KB
MD560bd78e6808e7138455886557bab80d3
SHA11fc61f4d0612b910ea84ccfba5d3c197da0d2622
SHA25695ec8d1dfaf52c9847a05b20b1ff5dad46c7768c009a27b3a953c9562247138e
SHA512573f0be563b59d30c58378c5a58941f62207929cd5071f7c9023cb2c4dc8304d6b738f248bdaa932792e4f76273448ec937ef1a5bb914fffaaa09b5a1d19ab36
-
Filesize
16KB
MD5978fdf85b8448e3a7c9015e51477eb49
SHA1793bb88398dc9457935a4416638d5ed3974baf19
SHA2568f72919eebbe45ed6d33b7b763d7e45d76a880128aee9aa5c29d28ab79689a92
SHA512852b2d3e2607c96625e9bcd454c702ccec6a0f07aba3410976d6400ecd2d48ccc92d93c8ce7fcc87a622d04357bd6805a996f11d339ca7fc3eab99c0e991fe38
-
Filesize
16KB
MD586a876a8ab9a34eab90144bbb0811909
SHA1f38c7f33bbfa4c8c05622a5968df3775e541fdd9
SHA2562d3805aa0a8540fd80b63ad249bcde086e55aa39223ab99db24e90bc233befb0
SHA512aba6628904461b37b25e8e2aa30fe5aabb6e0692c73c09c7d1e9b9aa5a2c6ac2b33df3f8e513c219a902cd367353ec1aada562ab6fe0abac591bc27e472bde95
-
Filesize
16KB
MD51188c81863ea1d388374816acddec88d
SHA101ca91fa133d7928f576944c59a4db18e34ec227
SHA25640d67802885ec395040ad23c275df636f822019ad84154419cff3f581c67e410
SHA5127f6b0be4912dc9b8d014f18ed3911fff726a92278299ac1325edfcadc70582418dedc687ea145889ca2c0a35f167e0823b42344979485fff5fd870ceaea485bb
-
Filesize
16KB
MD5a0c6ff9927105b61c913aa724cfd143b
SHA1ebac17bdbd979c79d778e8219d36d9bc14a3b38a
SHA256bf63ebd36bbbe92c22dd9dcbe9711edc1aa6166a2b519b7f8f6de451df421f71
SHA5121a2f13fe0d10154f13e8158af0afbf61de1d8ab7fe2677b4ad0a6ccca32f13f7a69e33afc08da2bcf7ae03df4ebe998d9bc039563a3671633d759dd8bed70f9d
-
Filesize
16KB
MD552b244c5f0b1de26f999e7701102f076
SHA160d8b9e5b7973c519b601ebed82e451ad9a48c0e
SHA25680076a4650a937d2530399780ebcd3fa356beedf08c30a36d144016dfb02e80e
SHA5123ce7ae0fbb9442c2f145eee7d3bb17da192d755b3266ded46b3922661967c212bc5b307878c058a5be4403c3e31fac6860906426b4543bf4dc50baa0ada1e54b
-
Filesize
16KB
MD591ff8d9d3d986a8b8df41ee4bc38d40d
SHA1ae406415cac6206eda6aff4b9a6714b72dfce469
SHA2566b0432db07c0541bfebc45223a7b5d098545195cab42e851573e81681edf92d1
SHA51273d8b876a9a03074559699d51eb4c2c933578e47b169da63cdcb1ee06515893c1fcf8d6b161c9aa5630bc407744346b553ffc41fb50b8844601396da2dc79b08
-
Filesize
512B
MD5d2624630b36f84ec1eb775619cbe4d40
SHA13f85fd62b359ef3d3ab8aba1f24126d2b1751032
SHA256b6ad51e70f56d64913524308572d680e98c088af64eed5fd203262d536c65b82
SHA5128713fedd1b56c07797d6fd02e4076769fb01717230c61c541f6d6c93e883b0b42470f5ccb89062fd344de345a16d23fe6a381c5d900856189c2ff565a987bb24
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
4KB
MD5c8c68e8cee599c897e4b3b5a72993bfb
SHA154f42b0e535dbc863b223d5306ee2bbc6d35eaf0
SHA256f3117e6f99e1e87cd763b678c13f036725a5b2e9dfd61210ca6d865f48c91a55
SHA512d995b94ac9d266ad784ccdb0aa184916fbc2be4830bdcf7be4b83226343b7de9113c80491cee50443f19b8f6816e3ed96f87681a04440ea4918b9e012229ac78
-
Filesize
28KB
MD56bd511fe83657851003b989e7d4dfc4c
SHA12a911d5781adcbc56967a7c6c59e24aa96f057d3
SHA25640e4b953ac5f94faee4bd680b7cc975cddb88fd0efc5aab8614b9b4be8ffabc4
SHA5122666c4265bff731206c1e2c107e571678675f8dc8de6e1107d38632713980ba1daaece3ebf55cc6301a7a1c753d1b1af6b4eaef5ce5f7b1ce8970157fcd63908
-
Filesize
4KB
MD52530e5ebe361a38e743e4c2bc5721048
SHA1ef7b2dfe42eec24c59c4bd950511e664adf0dbe4
SHA256a23dec523f8c421689832cce3d0df1ea2d4b3d7858e7f74a3e84f0b93b49c0c1
SHA51240b6127499f16d525282bb6aa9480844be3b8d59f6763757e89e0b59ae32158b17944ccd82a50cf2550f1aaefc398319f2b06c32e8041ee62e4aedf3dc6d078c
-
Filesize
4KB
MD5a098786f2011e551f50a96a92d99fd05
SHA161c4b76d564ba154d0678f894c505f8294b8f486
SHA256c1e336fc480c68112138e82239b7c9705410f9f535af3142053b302877ae6877
SHA51263eb00c708de60b89655064aa2af654f71698fb4998abc4bff253f97c3daafb9083fb232a3ae49309acefee6c84c40cf1b9f54bec6ff215846642241c6e627ac
-
Filesize
4KB
MD564dd54a6b936f1de9ef01193ae31221c
SHA1b582f29a6855c8e20078aac3fb13e7ce5cd2f6f8
SHA2563dc005d6f044650ec47d57b86a31dc20a6ea5a10e16c8040e300fcaacac98850
SHA512d41e12956713a6678ea038b754f80b378f678ebfdf0de1cfed7305e455495d5b2d495dc8c23aaaf9cf763b15bbcc51b61a52c38f038ddebd1aa0495ea31362b2
-
Filesize
4KB
MD5b14e8aecd750dc3e1240405fe62ee226
SHA10cbcb769ba42b1b0c44aa9498884164f05352cd6
SHA25633ec1c86081e9c51604a60d319c69829096fcc268366b5f7e96f2cff0ec71419
SHA51220c62d57cb438d44c53308ca68052ca015be65f769504c750dd04eee8f87041416228b10a7f0792c8c61370fb40c670ca18d046538f0e120f4180d3e6b02d92d
-
Filesize
299KB
MD5a19c2ee959de591882abee257ee26220
SHA18fad45232d955a6f33ee61dfafa3479439e9aa95
SHA25659923c6db0056021b64d30de21dcb397e00eea13b152e23b18d8dee365f9d5d0
SHA512ff1a2704d225452873abc5b4a1945a860fb56bbec4d1b17fd1178058a78a9be3647e3aae92cd412985b2703ecf3a2db7240601a7890e217e063c00200bd45d44
-
Filesize
1024B
MD518a180bc6e9ad79c5998b84f699c2338
SHA1dbbc483aaa42ff5300a4bc969f9c7c6bd16adb77
SHA256d02a4deee22bdf28892dc68896be9ad28bcd29da74aee0d1131c707058b2aaea
SHA512890abcda9ee5c63eb5f71f8f57adc4d1721b68b9d335ecac287332ab1880d4ed4a2c708753c4236b1f6b595aee477abd207b1e4b421946bff383c89217bcd577
-
Filesize
1KB
MD55d90cefe9239a12f76e7f4872ff07325
SHA1a03ca91f2c4916527f4d2d047b8a579ba7d20bee
SHA2568191395185d15f43b87d785e1729a8dd48a532ac195d2f5116736692fc3744e7
SHA512d738de49a6705c78af9bcc1d2fa3e9093470b514bba361a435e0715215f60ea4e0269eebc624f07d037ba2d115ffa417cbc2fdecc459bdda7e2216974151ce94
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
81KB
MD58a591d1d652673aa1e9551a2f9b38b5e
SHA19795f3658da39244fe86b15e54d252f21b1fb44f
SHA256665b6af4c7f437310192b67c861e6873f9ba38d9ca1296a062a3c6b7ff2f0c7e
SHA5123d27f2185ceda7e99e4044f784e0cb9fb2780fe60ff0d4381e30e2d7698e1db6542176c550ea56950b86bc92e7839e1ff011e20eea4d3b43d0f34d9bae73c2bb
-
Filesize
57KB
MD533e3f224a3b555eca2018318104af0cc
SHA1db2c6a290cf6b48eda0c2971c3f73c7dfdbeb0a4
SHA2568b76ac4252194bb308650bf3cbf1b87dec25f89fea8ea6682778662742fe7987
SHA512b80ad1415f077d5aee81174671c7ee449dfce5749574c8aed9771a54ad37aba1927c2968cb8e555905ab23826fb7c4b529c117eec06e115ac21614603c241084
-
Filesize
17KB
MD56faf6324b46dd9fd30bf5643b466bb52
SHA10f7c6896defe7b827b0f39f6cb466714153a55bd
SHA256b60317d3d489845d7b3459f200424c0743cd346d0330881df31efb1cbca6b7fb
SHA5125356202425ed2611d5954e9d3a443adea711a26247c4a41c9120a035e919ff056d39575b4b885ae023499f5abc3d4229ff5f16d1163b6d760593c60c0039bb0f
-
Filesize
86KB
MD5ef0881e2d2a6444249f489d75df01b7f
SHA1b9844a0cd4f5f2a074fc3f9c4960f3a04e863c10
SHA25626612d75530e83e0f3935b58aea0c0eb9c8c733118eebb7af12564946be200f5
SHA512e772f10dbd9cd7a449cdfa84ea9607f4973263886e60a7edb86becef3d838bf63ade30760409236c954073b7adf53a3d7684f47f7b38670add798bc89a53a965
-
Filesize
41KB
MD52b174b476cef5686db3c0c27c953374a
SHA151ee9ce515793dfd8326ae8f658b9ae402b94994
SHA2560396823bc0c6c2f2b96fbddb8b0c305df671e2d76873d004f5226ca410fbd7ac
SHA5126a076bbe7a4e908ac47a2ac704537dec8176dca0eccd9b6351a5d5ae08fafab1cd75f6cf8a17b85d83017d452cc917ac6496053eb485e966433d22705a9f11d0
-
Filesize
51KB
MD5751ddbb053a031d15eb3463d0256c2bf
SHA1da241acd53250396d6af5ede400f8e56bde82788
SHA256ca2867c61525ab2487693a8718ffdefa32dfb63b1f508e49647db2c556d84adf
SHA512017716d337676dfc6255e7d7023ce47ce3ed533cebd121c511fd5ac71d6537f124ebcd4c169ea297f9611b5b93e449f8fae52fb8aa4598b640065ffd37d87cd6
-
Filesize
58KB
MD5621438bd8b57d903ebca7dfddeb71bcc
SHA10e17fe13a66d7bf5f0452ac9bd12e66cf9419eb1
SHA2563d41cb42eb81da79432a093e5b18d239810ab7e0a78b657a1302139ea99a2bfa
SHA51258350f17f34da15bf04f942007d91ae7efab97cfd5802ce6ee7558c915c99c84c5d025e79dfaa2a35b60406a5d12d585a4e268adaaea16c3a03c2760f6f28f64
-
Filesize
56KB
MD546f772dfa86553d90eb2fe66eea07573
SHA1257433856c6e4c89a58cefca159363e953a80c00
SHA256ed0becdc74d2cd02ac10b76d6f91cc4f5f173efa40e93503eee821ea9e626e23
SHA51278f4fcc3aff819db02c4fbc38be1f09d2c8bb3d18daa45bdf5c9ddab8f2a80385fa30fa146e001fce97ef3cc50f39b0c3fd55d71da069823a20dcb004ea5869b
-
Filesize
60KB
MD5a4ce1d9f76869fe7e210d361cb86ab91
SHA16b53a4f9ed0eb7bb1497d7e14bcdf26308e8184b
SHA256fb7867fe2ceeef8d49d643aae4fcc52cf4b20a3f1819482c16aa4ab075b3babe
SHA512928fed3cc2172aee088bac02e4358583e48d82a4052121e9914fcbf24a8f85979928635e34eb0a99a7b411389eab9fa68f55d00bd5e7b51d83c5e1fabd6ecce2
-
Filesize
61KB
MD5653539559dd6d69900d5b9fd4b656ef7
SHA1710f53ae799cdde1d6d23abd97e34adae84686bf
SHA2568e3bb4807d2f5662f5be4f9b0950c8372ebf745c52386dd991178b0daf516749
SHA51268c8acdace94af0c9451144d7d78f32b9940320a5deec1df1b8090c6c437d2f07814ff672bd1c2d0c10e7746bb2b8c69870c62eb1e8c4e00d3692dba31fe9143
-
Filesize
50KB
MD59c05da31c8d7179f1b2e25d18439b22e
SHA14df2b743c623318c91d33a6ea99dfd9efb176927
SHA256d06767c3b9f663d457ac4f12c91e3f0ca1f9065ebfea0f7de479033e0f5016cd
SHA5122c396e859460e9728b6dd2cc4f6271dbba01d12132442a240eb047748b4531d564c636ba5ae951c0c331062ed465273ec1720e254623ba18c7aef1e2b0eba112
-
Filesize
39KB
MD56f9605393f308393f80c6a4ae655994c
SHA1ccd32dbed41aa506bd010a98436180fb3a3a580f
SHA256c070d00213311032276f33224558080b43145e2eeaf236037e981afd89409ba9
SHA5125559ea44c11517710440dba08562cdf5b0740f6be7ff072e6c96657a677cab3c1a5c81e986159f014bf8c8f1054f3ab65f1da02db61e53570db062621802374c
-
Filesize
36KB
MD5de86a0c25747a960e5d0dbaa39dd1a06
SHA12549192bea7eb0d04f7941050e4e89a7f901eba0
SHA2569fa34a8f2b58b83f16d79166087a76666f9bf9b3582df0192d2a58ae78ba2190
SHA512a4ba51ce7f5789f3ec484c28d5b0bb5e6d6fd5a056b042bbd95d5001503b7115eb46060beb3931209a7177f36375335f1493d823855aa65fa0e5cd1bd173cbc0
-
Filesize
35KB
MD58eae0c4333cc0dfee661eaa2b3bf4964
SHA1b2b5fc4cfb11548d5b36f2e33211da64c31c1c8f
SHA256984060cb7d5b0164b7f5ad557383420753c69665d461a5ec3cf9405bcb43b674
SHA51245ebe119adc27eaa1947860e8c8e58cd9f476d1b50f5f16e45250d66a3d0cf3d65c0fdd891c35cf3112ca8cc833a1a0848108de1bc608bc9deb2919ebf25272e
-
Filesize
9KB
MD50600307eda72c9b66963a7e36a2b1ed7
SHA148007d9343dad91f62da0761b679ffa6f775431d
SHA256d4b79433ee76c4fee4610064f86f6d9b1a6155177c91658f13628afeac4335ee
SHA51297e0c2f2fb7e8535eb5447418f122fc57926a8eaf99702ffb08c55a1f11b36c978b51fb41d393da9b3aef14d36e443345fcfc528a20defd585da4d974c08bbcb
-
Filesize
33KB
MD5340193296068da8dc7f7f911969bec0a
SHA12344e82f0aec3a9d824d0514524bc26426de06b0
SHA2565c1b26b61b9a05ee3538883782c0c71f0242e8752cfaf6cc630b12c488b90b81
SHA5123a8cc4a0c17d17b8c239fafc93bc8a27473d22c848bc88dc6cea305f42eec6669a4a4be04ca885e63ac45d5181866cbfb70d44cbada888466a8d28e5b55afb38
-
Filesize
30KB
MD5543344d007873bf40e78370ed7971035
SHA1623db729be3ee81f1aa85468999579976faefb77
SHA25600f2a5834bfbcb56e8e582ae1daf881424cae9e30a5ffe59b1325879ced7876f
SHA51257a0132b47c07379719002cd03f007424ea51507973eed62ad507b6b2824a439ad9ede2b99830ef5f86943ea88bfdd0f348a98f29afd43b9f6ab4d3b1ca86e8d
-
Filesize
55KB
MD5fa56ea4497f8a0273f4224b975eac2c8
SHA18cfe496b44424566df59d368ac8aafceb449927b
SHA256add570765cd8a7a600bbb8a18d56a44bfba158e649fcc4fd7cdb2cf9742a42a1
SHA512298b1679abd0f46a972025f9670450b82b1c8abaf9551da3196e7b51afc176fb3e17596b7c47df85323e6e095d69c533283f47042c1ff8deaf5930445e9151bb
-
Filesize
39KB
MD580ea011c7a8a8dd9365bb37c35f43152
SHA1f05e6718cbfbac12299ede3b0226e3fd86055a76
SHA2563ffb4ae4bab230d3b52b45b55c4ce5f8118db9c436f79b4fc0995ec6a88f1098
SHA51228a787c977362aae63db2cf6312037efa5876e475ab95e9dace956518cf46f09729bd2f7b28a752a2eaf9750cabe01924187c3c27876cc48b73b2879b5dca1d8
-
Filesize
49KB
MD5cd19be2e2be6b3606019c3e3e03b1d3d
SHA1367fd9ed0fa5059f53f9607499f2449f9b7d3e70
SHA256ab69dd5f9a6971deac63708035a4380b74e8113c696d4967f2aa81e0b8be240a
SHA5125198a2256934ee937f512c7a016d0f67ee1bebe914f206596245feb37ac31f4000561b69af6e9a8639e6348c4babb4cba2018ebe99d4fc626189938a58eb33cf
-
Filesize
126KB
MD5f8bdb1601eda2e6ba23d6028fe096ff0
SHA181e852ce080733070355b43752f9b54648e1efb4
SHA25672f199f552feac75398d6efb1b6d684006b060c790af636aa2709cf083b19960
SHA51270f6df390f62906f6a0f8574373644929338cdfa3f7df7f24e95049dacac09802a38247ca6f7954087bb62bc691bd609e911b5faffb762d80cc376d7896cf84c
-
Filesize
33KB
MD510f7a9fae6a1fd97469df5ec50b7fd14
SHA182d09f983006a39ff63bc447e9f27f9ecf9d21d5
SHA25655f8948bbcf3320e846f0f1b302d23b866a2ab7b5225486662b54ec40d7424e2
SHA5129e0ea9fe8baac48bbfcb1ed788045a1106c7c718af4a656e8f5c46e7924ab78defbc000b89705f970d1fd0a5ad231501abba0156e912305030269979040aae0c