Analysis

  • max time kernel
    147s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    26/04/2024, 17:06

General

  • Target
    013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
  • Size 4.2MB
  • Sample240426-vmn97agb83
  • SHA256 71bb4b9db79d5b32cb425e68fe2b6181c1f2dbfd6d9bdb605ce0831abfd2c879
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • ir.dariadar_iran2018.torshi
    1⤵
    • Requests cell location
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries information about the current nearby Wi-Fi networks
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    PID:5086

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        __pushe_base_lib_db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db
        • Size 24KB
        • SHA256 d54c6e8784f4dd94952485b9318770d747c94374860ebbbfa9f3c448c9b6ff19
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 aa1735e51ecfdf8613c15b31434e74dc20f2681156c9c02a3a074f64d2c2c7f0
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 a529c74907c9511940dead0c5c3676812c5b4c0ffc2ff5702304f8838fb0f848
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 10260ab1c4fea7d094180b874ed7e68516418c7b6deb292a6bcefc08b6b9881a
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 aba209cb742e2ead24804ea3a82d0c9903548f94d99d3bf76b879887739fd97c
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
        • Size 24KB
        • SHA256 093bc2d0295a9cd907197a08916476feeebda242ed556e2e55db5198b2785d47
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
        • Size 512B
        • SHA256 dce11c692a43d8c8720747aead25075bc283f16e48ffc14a74a7a12a25577fa9
        • MD5 SHA1 SHA512

        evernote_jobs.db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 c479f839c0bc15e9a9749cb5a5a3eef4e09c0163160073477f72fa78b2e300df
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 40b8fb8260ab912703a0f3b7e481052099611ea8aad1e3d279b7e8aca878e6eb
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 c9a38f694278bfd710a7342e8b16b38ab6ce43cd07006aa3275cb41b4cbebc26
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 ca14b0f17bdcadd4d8d4291e3d1168c88bf272ca04681c2b97215ede407edf7c
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 e7c1a7badce5607c6aa89580bff1fd68cc22633c0955e51918c0e8faad3d34e9
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 db977c510eb449571e22669fc460a0faf620ced8f274a7774602d6069d7c9688
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 d2e6822b5bf1698c33e3ae8baff07f3bc55e68242d0c7b2a32a2ce39174bb904
        • MD5 SHA1 SHA512

        evernote_jobs.db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 84ed7890f63440c0a375cabb62668505112e401e1dd28bb7633ac33c14dd1f9a
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 54507cbf917eb9c47d711dcd11c1321adbd8b3f8f29d9fed57ac794d11937363
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 e2b7fa9d57d959fe575ddb0add48f9e6d86d8937b50da5ed971c3d2c4c83cd77
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 110bfbb1512d0ee6f6971a8672d416a888d62cc9483193826549672119702625
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 9c4171183e1c9dacae9e769ab2bad90f86faf71d2b9080697a5a2be68934127d
        • MD5 SHA1 SHA512 SSDEEP

        4_5942895236148625435.db

        • Path /data/data/ir.dariadar_iran2018.torshi/files/4_5942895236148625435.db
        • Size 299KB
        • SHA256 59923c6db0056021b64d30de21dcb397e00eea13b152e23b18d8dee365f9d5d0
        • MD5 SHA1 SHA512 SSDEEP

        unsent_requests

        • Path /data/data/ir.dariadar_iran2018.torshi/files/unsent_requests
        • Size 58B
        • SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
        • MD5 SHA1 SHA512

        1.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/1.jpg
        • Size 81KB
        • SHA256 665b6af4c7f437310192b67c861e6873f9ba38d9ca1296a062a3c6b7ff2f0c7e
        • MD5 SHA1 SHA512 SSDEEP

        10.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/10.jpg
        • Size 57KB
        • SHA256 8b76ac4252194bb308650bf3cbf1b87dec25f89fea8ea6682778662742fe7987
        • MD5 SHA1 SHA512 SSDEEP

        11.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/11.jpg
        • Size 17KB
        • SHA256 b60317d3d489845d7b3459f200424c0743cd346d0330881df31efb1cbca6b7fb
        • MD5 SHA1 SHA512 SSDEEP

        12.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/12.jpg
        • Size 86KB
        • SHA256 26612d75530e83e0f3935b58aea0c0eb9c8c733118eebb7af12564946be200f5
        • MD5 SHA1 SHA512 SSDEEP

        13.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/13.jpg
        • Size 41KB
        • SHA256 0396823bc0c6c2f2b96fbddb8b0c305df671e2d76873d004f5226ca410fbd7ac
        • MD5 SHA1 SHA512 SSDEEP

        14.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/14.jpg
        • Size 51KB
        • SHA256 ca2867c61525ab2487693a8718ffdefa32dfb63b1f508e49647db2c556d84adf
        • MD5 SHA1 SHA512 SSDEEP

        15.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/15.jpg
        • Size 58KB
        • SHA256 3d41cb42eb81da79432a093e5b18d239810ab7e0a78b657a1302139ea99a2bfa
        • MD5 SHA1 SHA512 SSDEEP

        16.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/16.jpg
        • Size 56KB
        • SHA256 ed0becdc74d2cd02ac10b76d6f91cc4f5f173efa40e93503eee821ea9e626e23
        • MD5 SHA1 SHA512 SSDEEP

        17.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/17.jpg
        • Size 60KB
        • SHA256 fb7867fe2ceeef8d49d643aae4fcc52cf4b20a3f1819482c16aa4ab075b3babe
        • MD5 SHA1 SHA512 SSDEEP

        18.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/18.jpg
        • Size 61KB
        • SHA256 8e3bb4807d2f5662f5be4f9b0950c8372ebf745c52386dd991178b0daf516749
        • MD5 SHA1 SHA512 SSDEEP

        19.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/19.jpg
        • Size 50KB
        • SHA256 d06767c3b9f663d457ac4f12c91e3f0ca1f9065ebfea0f7de479033e0f5016cd
        • MD5 SHA1 SHA512 SSDEEP

        2.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/2.jpg
        • Size 39KB
        • SHA256 c070d00213311032276f33224558080b43145e2eeaf236037e981afd89409ba9
        • MD5 SHA1 SHA512 SSDEEP

        20.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/20.jpg
        • Size 36KB
        • SHA256 9fa34a8f2b58b83f16d79166087a76666f9bf9b3582df0192d2a58ae78ba2190
        • MD5 SHA1 SHA512 SSDEEP

        21.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/21.jpg
        • Size 35KB
        • SHA256 984060cb7d5b0164b7f5ad557383420753c69665d461a5ec3cf9405bcb43b674
        • MD5 SHA1 SHA512 SSDEEP

        22.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/22.jpg
        • Size 9KB
        • SHA256 d4b79433ee76c4fee4610064f86f6d9b1a6155177c91658f13628afeac4335ee
        • MD5 SHA1 SHA512 SSDEEP

        3.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/3.jpg
        • Size 33KB
        • SHA256 5c1b26b61b9a05ee3538883782c0c71f0242e8752cfaf6cc630b12c488b90b81
        • MD5 SHA1 SHA512 SSDEEP

        4.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/4.jpg
        • Size 30KB
        • SHA256 00f2a5834bfbcb56e8e582ae1daf881424cae9e30a5ffe59b1325879ced7876f
        • MD5 SHA1 SHA512 SSDEEP

        5.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/5.jpg
        • Size 55KB
        • SHA256 add570765cd8a7a600bbb8a18d56a44bfba158e649fcc4fd7cdb2cf9742a42a1
        • MD5 SHA1 SHA512 SSDEEP

        6.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/6.jpg
        • Size 39KB
        • SHA256 3ffb4ae4bab230d3b52b45b55c4ce5f8118db9c436f79b4fc0995ec6a88f1098
        • MD5 SHA1 SHA512 SSDEEP

        7.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/7.jpg
        • Size 49KB
        • SHA256 ab69dd5f9a6971deac63708035a4380b74e8113c696d4967f2aa81e0b8be240a
        • MD5 SHA1 SHA512 SSDEEP

        8.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/8.jpg
        • Size 126KB
        • SHA256 72f199f552feac75398d6efb1b6d684006b060c790af636aa2709cf083b19960
        • MD5 SHA1 SHA512 SSDEEP

        9.jpg

        • Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/9.jpg
        • Size 33KB
        • SHA256 55f8948bbcf3320e846f0f1b302d23b866a2ab7b5225486662b54ec40d7424e2
        • MD5 SHA1 SHA512 SSDEEP