Analysis
- max time kernel
147s - max time network
163s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
26/04/2024, 17:06
Behavioral task
behavioral1
Sample
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
Resource
android-x64-arm64-20240221-en
General
- Target 013f27aedaa260dd3a876637d8094207_JaffaCakes118.apk
- Size 4.2MB
- Sample240426-vmn97agb83
- SHA256 71bb4b9db79d5b32cb425e68fe2b6181c1f2dbfd6d9bdb605ce0831abfd2c879
- MD5 013f27aedaa260dd3a876637d8094207
- SHA1 bb7f332e9b752e173a9af2aea6f4a67b1273d366
- SHA512 b7afc034fa9755d2218711798de62c4d52e8ad8356dfa9b3fdb2efc5d09f1419feebde42ba13be1f4baba6231f285056b17f0b12feaef11cbf2bad77d96e3f15
- SSDEEP 98304:+qU2nTfAEwzbJ4NAkmNutky/bvhmQd4Ac8R4gyIR6mWxq0p:zU2nzA34NUQb74Accyk6mWM0p
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.dariadar_iran2018.torshi Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.dariadar_iran2018.torshi - Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo ir.dariadar_iran2018.torshi - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo ir.dariadar_iran2018.torshi - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener ir.dariadar_iran2018.torshi - Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults ir.dariadar_iran2018.torshi - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone ir.dariadar_iran2018.torshi - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver ir.dariadar_iran2018.torshi - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.dariadar_iran2018.torshi - Reads information about phone network operator. 1 TTPs
Processes
-
ir.dariadar_iran2018.torshi1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
PID:5086
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db
- Size 24KB
- SHA256 d54c6e8784f4dd94952485b9318770d747c94374860ebbbfa9f3c448c9b6ff19
- MD5 63203db6bd8faf07010a8540c4f45283
- SHA1 101f9ea5a3854df3acd0942c7d02ffec0eded454
- SHA512 b95bcb8878fd3d6e78927aff51d335091f6ec96d08eff5c06dc8f7dcf081411c6ad5e35a434e1a658eaf9ae7f8bf5f01fd38ce25605637f3ece939c0664e4ff8
- SSDEEP 24:TLKYxSe7TlcK///IoVM9cREGSzGOEwyAwqz+taZRKZKUmqafFuF8LJC68LJCA:TGYxfHX9VM9USz+tUyofu8LJb8LJr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
- Size 8KB
- SHA256 aa1735e51ecfdf8613c15b31434e74dc20f2681156c9c02a3a074f64d2c2c7f0
- MD5 b6ec8323e98df9eedcb563862ecb3e50
- SHA1 acd2c37ed00ce18db19d85aed526504ab5cd7272
- SHA512 73afe3642d5d70325b8f37fb2746783171268abc71c6882a6d4141e84e623aefca07d588fbc30fa172a531f36949843ac46e69c139d734df98411a711ecb9fd1
- SSDEEP 6:7+/l9TFn1ig9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKBx:7+tJGqLiuWdwRmBEyPbY
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
- Size 8KB
- SHA256 a529c74907c9511940dead0c5c3676812c5b4c0ffc2ff5702304f8838fb0f848
- MD5 f1474a241940a22cc4d9adc4aca7c87e
- SHA1 3b572c0fdadac9aef5500c16125af5bf42be487c
- SHA512 1c355de29417516e0ad88a77ecd3348a3f3e9cdd315c0978252cabf89571df441573bbf0806a3e0781ffee0203996979ccc7d3f6fbe2cb7ad04a559d5fcd3f40
- SSDEEP 6:7+/l9eSFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK5kt/y:7+tA4qLJdTRmBEyPbIk1y
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
- Size 8KB
- SHA256 10260ab1c4fea7d094180b874ed7e68516418c7b6deb292a6bcefc08b6b9881a
- MD5 90e4c7d670306b4d1e7b402bc3495914
- SHA1 d3e4df039db669a1f317ce83e4cf6599a9117ff7
- SHA512 2741f60339f54342785aea83f826da9107e599af3684ec9f458c60c59f37fe2e2b92bbf267bba0ebf8ffb34498456ed523a231921ae2a6b8c35328e19b1185b1
- SSDEEP 12:7+tjNqLXyFormG4NK0COnHdOnHXy1TOnHyilc36/QN6/uJaEcZVMJwRPVz27VNgl:7+tJqLbxSe7TlcK///IoVM9cREGSk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
- Size 8KB
- SHA256 aba209cb742e2ead24804ea3a82d0c9903548f94d99d3bf76b879887739fd97c
- MD5 f9741295ff23da889035e703c326565a
- SHA1 e9352dedc0cf52b45490748b05a5a45903de6577
- SHA512 215997f5caf384f730b923e22cf6831615dc24f212a4d04255628d4f38474b540157e12cda9536148045f4e9f990a7949e0c2287cf2cf29369c65cee36caa893
- SSDEEP 12:7+tTrsqLO00FormG4NK0COnHdOnHXy1TOnHyilc36/QN6/uJaEcZVMJwRPVz27VK:7+tTrsqLhFxSe7TlcK///IoVM9cREGS+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
- Size 24KB
- SHA256 093bc2d0295a9cd907197a08916476feeebda242ed556e2e55db5198b2785d47
- MD5 ad813b9e39775ab7ddedd4b2b9fae729
- SHA1 c1ec43eb8148b57f7ed097e9b148d1a4317dc18f
- SHA512 f6174553a63461344d76aaa4c3bf42f1de726aa9983aed9cf8ed7a492355ce40dae26de5ad0aa10631c9a6e515d90d06e8a23b494b5fd20a1062a7462f7b4de5
- SSDEEP 48:7Mcyom0AwONSaWqpxfHX9VM9USXM6p69rQowON7:79rKSJGHXbk1Np69rB7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/__pushe_base_lib_db-journal
- Size 512B
- SHA256 dce11c692a43d8c8720747aead25075bc283f16e48ffc14a74a7a12a25577fa9
- MD5 cea5972f5ec21bc5f3d497bacc70851d
- SHA1 93aaa86567286413751c1bceb0a61199cfe0ca26
- SHA512 bccf0dc14eb9e401139c77f4cfd205377e3ff95e11d5f8d1d700fec7f0bb0980e5e6c577c992e2475fd53f6521aca57390f4e5e3f2c135d07a65a6965c699b92
- MD5 SHA1 SHA512
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
- Size 16KB
- SHA256 c479f839c0bc15e9a9749cb5a5a3eef4e09c0163160073477f72fa78b2e300df
- MD5 00e829076f54c72b50b63fd6de296a03
- SHA1 fbeb1b8be863931f98a7c29224a03b89f9616ab2
- SHA512 1c6b0bfe980050072927f8d407ca86353098d03502f7194f141d43c045a3f35103261811281f023262f4823a4fd70659d6802b76e126e991120dc14cdf74bbcc
- SSDEEP 12:TLpLnRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbBvOw:TLFoVKRvTZc+UGSN
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
- Size 16KB
- SHA256 40b8fb8260ab912703a0f3b7e481052099611ea8aad1e3d279b7e8aca878e6eb
- MD5 5eff8aeb42b3268091a4a1bfc14cec56
- SHA1 5518ff54d09b0b7622fc203978caf7a820f961cc
- SHA512 614e30b86837928d274066434b3638fcf1ad6bf2a95a982d470df38c4ff46622c17ad1636d26e113078966cbca242415ce931d7434fac705f56fafb825ebe32e
- SSDEEP 12:TLWuLeSRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QG1vv:TLzedVKRvTZc+UGSP/t1vv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
- Size 16KB
- SHA256 c9a38f694278bfd710a7342e8b16b38ab6ce43cd07006aa3275cb41b4cbebc26
- MD5 4f9b6d8b04e9ec0906e17187f0902ea3
- SHA1 5006bbc4fcd6a7f973d5a47a19b1dedc986d5c37
- SHA512 c042b6632318b8b14d7f4d3428b5225ec486fb9af245824b9bab37761384f3e1f542363ef3d917b8e7753ec6290d0352e519e3b4121daf777613e5f1720a3a46
- SSDEEP 12:TLiL+RulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/dX48ivv:TL2hVKRvTZc+UGSP/do1vv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
- Size 16KB
- SHA256 ca14b0f17bdcadd4d8d4291e3d1168c88bf272ca04681c2b97215ede407edf7c
- MD5 78c1f298a73df21d42ceb19ce502ab86
- SHA1 8fd230b39896b15190abdb21c559ea657cd3e189
- SHA512 6bcc49df79e9ad7032023f8abb9fc89c84796fec58e054397b24df975a8592ac505fc391f6b8ef887a2b9329c4a03ac45eaa986eea102c4d8f38e22ed0c9d61e
- SSDEEP 12:TL1LDRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/dX18ivv:TL5sVKRvTZc+UGSP/dl1vv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
- Size 16KB
- SHA256 e7c1a7badce5607c6aa89580bff1fd68cc22633c0955e51918c0e8faad3d34e9
- MD5 f717e284a3db8e00201c104b314b8334
- SHA1 19cf9593f3eaee431bfc5cb2ab63227ba764d6bd
- SHA512 d871add158e5fc5ae47d64806d18ab0df7089eb197454658594c64e14ff96dfe94988ecb68a4b2aebf40f1c17544af3b6ff9f3d9c7c4d77c253940141a35d843
- SSDEEP 24:TLidVKRvTZc+UGSP/V+AnRO8Bm/g8T70eCSPP4uqoutcsVXfX:TOd6c+jSP/V+AQ8ByvT/DPQuqtcCXf
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db
- Size 16KB
- SHA256 db977c510eb449571e22669fc460a0faf620ced8f274a7774602d6069d7c9688
- MD5 9723abf7d0fec221b7062d82d39f15e2
- SHA1 5be8907dc7dc319c37213c477eee83c059e8faf6
- SHA512 bcb9645f507bc6a22208c15189d93c2488eb25e4888978dc1b34befb55ce3bc9e22c7c2b9848fa2f3bf75b8284300f8c618b98c1d2f1f379fe0f23c175bb775a
- SSDEEP 12:TL8L0BRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QGEvv:TLw0qVKRvTZc+UGSP/tEvv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
- Size 512B
- SHA256 d2e6822b5bf1698c33e3ae8baff07f3bc55e68242d0c7b2a32a2ce39174bb904
- MD5 225566251aace90cf0d0d232db3b7e08
- SHA1 526abbc2cbf11cd22c3c120e5b18e5518aaf0904
- SHA512 9675880fe59e6612d41f007d802b7ed8d08d515799c2b2e07f3551904a79c88a3070bdf44b082d2302feb6f79e01de59a149c57cbbc21c340ec22d276a716ceb
- MD5 SHA1 SHA512
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 84ed7890f63440c0a375cabb62668505112e401e1dd28bb7633ac33c14dd1f9a
- MD5 f14846bc4ba18f4459911791c788a778
- SHA1 d3360cd1e4b001de219c8c3343060887e8d73ad9
- SHA512 90e6dd1a7f6cafb18345ebc157281669491a8e3b5cef504a199b79a9fa2965e4ae3e71d101dcdc339ff9340ad43c02cd60db1d94b17895179e8d80a772df4715
- SSDEEP 12:7+tmGEvhqL8L0BRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPi:7+tLEvhqLw0qVKRvTZc+UGSGx
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 54507cbf917eb9c47d711dcd11c1321adbd8b3f8f29d9fed57ac794d11937363
- MD5 bad09a50b44956323916bfc13efc33a4
- SHA1 87624a2101fd816a63770fb77e079ed7c10b75af
- SHA512 e265c2c5bb8436bb62606ba58c240d01d1561e2d0d961ff07ea865c958ec7950ce0b823ca3d65c7b414ee3413d37d37129159e46d7a2a4de3ad65a0ce854b527
- SSDEEP 48:7Me+AQ8ByvT/DPQuqtcCXfhUHqLq6c+jS3W:7YPnqDX5MGtcj3W
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 e2b7fa9d57d959fe575ddb0add48f9e6d86d8937b50da5ed971c3d2c4c83cd77
- MD5 1dbc97beb8b52908466498bfe0d16f48
- SHA1 337e91a8a5f5a943a548914205802e1ba626004a
- SHA512 33d6898383f40af340330f928a9f9a54741c2dc7145eaf70ac536bd169e358fb8d2ca4ddc6f75d82265c63838b5e5239fbbfcaae3db508fa5610410fc67de457
- SSDEEP 6:7+/l9nGFn1zg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8DV:7+tFmqLiuWdwRmBEyPbj
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 110bfbb1512d0ee6f6971a8672d416a888d62cc9483193826549672119702625
- MD5 597374594587b7861d315b6972146c70
- SHA1 527e860367c353d4c0dfc56ff621a047392b7875
- SHA512 e80574927179837c46336b037911394fd59a4a1ba1f86d288f2adf4dca6fa1ebe68b84495543221f55b918b7623c9d1232f859854a2afd86e8ae88766540c429
- SSDEEP 6:7+/l9atSFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKi2kt/udn:7+tPBqLJdTRmBEyPbTDSn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 9c4171183e1c9dacae9e769ab2bad90f86faf71d2b9080697a5a2be68934127d
- MD5 d40db740f70bb2bede44a3658b808c92
- SHA1 0617d50af2f7d596d3bbedd0bc7ad66bc4b79d20
- SHA512 a96eed68cec19fa6697a688b848ec43e8ff57a29e758bd0165e6802c1ba4394e6267c669a24d6b95294fd48b6e78dca7483c9590b80d3a1a97107ebb03adb069
- SSDEEP 12:7+tgjTpqLpLnRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPb4:7+tgpqLFoVKRvTZc+UGS4
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/files/4_5942895236148625435.db
- Size 299KB
- SHA256 59923c6db0056021b64d30de21dcb397e00eea13b152e23b18d8dee365f9d5d0
- MD5 a19c2ee959de591882abee257ee26220
- SHA1 8fad45232d955a6f33ee61dfafa3479439e9aa95
- SHA512 ff1a2704d225452873abc5b4a1945a860fb56bbec4d1b17fd1178058a78a9be3647e3aae92cd412985b2703ecf3a2db7240601a7890e217e063c00200bd45d44
- SSDEEP 1536:cOtpx65/3QvoIrKO8brtKikEvrmfl90wZL9Emi:PvM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.dariadar_iran2018.torshi/files/unsent_requests
- Size 58B
- SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
- MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
- SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
- SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/1.jpg
- Size 81KB
- SHA256 665b6af4c7f437310192b67c861e6873f9ba38d9ca1296a062a3c6b7ff2f0c7e
- MD5 8a591d1d652673aa1e9551a2f9b38b5e
- SHA1 9795f3658da39244fe86b15e54d252f21b1fb44f
- SHA512 3d27f2185ceda7e99e4044f784e0cb9fb2780fe60ff0d4381e30e2d7698e1db6542176c550ea56950b86bc92e7839e1ff011e20eea4d3b43d0f34d9bae73c2bb
- SSDEEP 1536:lkijBN8rrERNE00aQXUcRfLD4LrPXJWwxWALCIJNIUOouDKqIZJHF:iilN8vQGtfLDY6uCIDB8K7nl
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/10.jpg
- Size 57KB
- SHA256 8b76ac4252194bb308650bf3cbf1b87dec25f89fea8ea6682778662742fe7987
- MD5 33e3f224a3b555eca2018318104af0cc
- SHA1 db2c6a290cf6b48eda0c2971c3f73c7dfdbeb0a4
- SHA512 b80ad1415f077d5aee81174671c7ee449dfce5749574c8aed9771a54ad37aba1927c2968cb8e555905ab23826fb7c4b529c117eec06e115ac21614603c241084
- SSDEEP 768:JGV/SftwkwbNsewZEVMJeoRcyQynnEpDgHN8ulyUhx6Jn0+7nqRGhj4fSPVAqyq9:JG0ftWb3elQynogPhpwqy8KPZCp/tO
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/11.jpg
- Size 17KB
- SHA256 b60317d3d489845d7b3459f200424c0743cd346d0330881df31efb1cbca6b7fb
- MD5 6faf6324b46dd9fd30bf5643b466bb52
- SHA1 0f7c6896defe7b827b0f39f6cb466714153a55bd
- SHA512 5356202425ed2611d5954e9d3a443adea711a26247c4a41c9120a035e919ff056d39575b4b885ae023499f5abc3d4229ff5f16d1163b6d760593c60c0039bb0f
- SSDEEP 384:jjh1ZHpTef0KeY88Wh8AdBwK3RDt/Vt4IChSWrYxekTZHpEIoPFYJ+1IyS4:jjhDpTeuh8Wai3LPx6SWriXv7VcKe
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/12.jpg
- Size 86KB
- SHA256 26612d75530e83e0f3935b58aea0c0eb9c8c733118eebb7af12564946be200f5
- MD5 ef0881e2d2a6444249f489d75df01b7f
- SHA1 b9844a0cd4f5f2a074fc3f9c4960f3a04e863c10
- SHA512 e772f10dbd9cd7a449cdfa84ea9607f4973263886e60a7edb86becef3d838bf63ade30760409236c954073b7adf53a3d7684f47f7b38670add798bc89a53a965
- SSDEEP 1536:lKXPRukuaYbOiKV/trkg2PJPCj8AxbJ1rNbuxUb8LUusKrY6NRd:EXPRhvYb2lyRJd4IUb8bseY6x
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/13.jpg
- Size 41KB
- SHA256 0396823bc0c6c2f2b96fbddb8b0c305df671e2d76873d004f5226ca410fbd7ac
- MD5 2b174b476cef5686db3c0c27c953374a
- SHA1 51ee9ce515793dfd8326ae8f658b9ae402b94994
- SHA512 6a076bbe7a4e908ac47a2ac704537dec8176dca0eccd9b6351a5d5ae08fafab1cd75f6cf8a17b85d83017d452cc917ac6496053eb485e966433d22705a9f11d0
- SSDEEP 768:gOsk7o0uyOBu4jlqTDcRUtWvH3B6gqeW2vnVm6UpZX:gOsknuw4jlwDUUtc6xebtmP9
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/14.jpg
- Size 51KB
- SHA256 ca2867c61525ab2487693a8718ffdefa32dfb63b1f508e49647db2c556d84adf
- MD5 751ddbb053a031d15eb3463d0256c2bf
- SHA1 da241acd53250396d6af5ede400f8e56bde82788
- SHA512 017716d337676dfc6255e7d7023ce47ce3ed533cebd121c511fd5ac71d6537f124ebcd4c169ea297f9611b5b93e449f8fae52fb8aa4598b640065ffd37d87cd6
- SSDEEP 768:l5IPxCx0aoRrg8FMhaalAuB9xWOJWBw/KZHQWCpPCVhCuAlUf:l5KBJg8OhaaZBTYB7Z5VrulA
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/15.jpg
- Size 58KB
- SHA256 3d41cb42eb81da79432a093e5b18d239810ab7e0a78b657a1302139ea99a2bfa
- MD5 621438bd8b57d903ebca7dfddeb71bcc
- SHA1 0e17fe13a66d7bf5f0452ac9bd12e66cf9419eb1
- SHA512 58350f17f34da15bf04f942007d91ae7efab97cfd5802ce6ee7558c915c99c84c5d025e79dfaa2a35b60406a5d12d585a4e268adaaea16c3a03c2760f6f28f64
- SSDEEP 1536:2HGSjKxpBJKOnNP4K0BLMlwNpmDrJmmUZdU6qm:W72x3JVnNPiVbN8JmBZ26j
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/16.jpg
- Size 56KB
- SHA256 ed0becdc74d2cd02ac10b76d6f91cc4f5f173efa40e93503eee821ea9e626e23
- MD5 46f772dfa86553d90eb2fe66eea07573
- SHA1 257433856c6e4c89a58cefca159363e953a80c00
- SHA512 78f4fcc3aff819db02c4fbc38be1f09d2c8bb3d18daa45bdf5c9ddab8f2a80385fa30fa146e001fce97ef3cc50f39b0c3fd55d71da069823a20dcb004ea5869b
- SSDEEP 1536:lb46OndRvHOS0H8L4pOnv7CvWOY5MrbmMoPswLSBWkjZnej:a7jf0cEov7+JY5MrbmiNjxS
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/17.jpg
- Size 60KB
- SHA256 fb7867fe2ceeef8d49d643aae4fcc52cf4b20a3f1819482c16aa4ab075b3babe
- MD5 a4ce1d9f76869fe7e210d361cb86ab91
- SHA1 6b53a4f9ed0eb7bb1497d7e14bcdf26308e8184b
- SHA512 928fed3cc2172aee088bac02e4358583e48d82a4052121e9914fcbf24a8f85979928635e34eb0a99a7b411389eab9fa68f55d00bd5e7b51d83c5e1fabd6ecce2
- SSDEEP 1536:sYwi/aWAACiOcOUCTEdOms8hC85hSSmebYsMFY24:mi/POvTEdOms8QUhSBHVFX4
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/18.jpg
- Size 61KB
- SHA256 8e3bb4807d2f5662f5be4f9b0950c8372ebf745c52386dd991178b0daf516749
- MD5 653539559dd6d69900d5b9fd4b656ef7
- SHA1 710f53ae799cdde1d6d23abd97e34adae84686bf
- SHA512 68c8acdace94af0c9451144d7d78f32b9940320a5deec1df1b8090c6c437d2f07814ff672bd1c2d0c10e7746bb2b8c69870c62eb1e8c4e00d3692dba31fe9143
- SSDEEP 1536:gqkA6O5duT7AbZnTZCYzJ0Ncye8103gJ49H1vkEd:bkA6OfuT76n9CM0NcpYJEkEd
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/19.jpg
- Size 50KB
- SHA256 d06767c3b9f663d457ac4f12c91e3f0ca1f9065ebfea0f7de479033e0f5016cd
- MD5 9c05da31c8d7179f1b2e25d18439b22e
- SHA1 4df2b743c623318c91d33a6ea99dfd9efb176927
- SHA512 2c396e859460e9728b6dd2cc4f6271dbba01d12132442a240eb047748b4531d564c636ba5ae951c0c331062ed465273ec1720e254623ba18c7aef1e2b0eba112
- SSDEEP 1536:JC0/uwgGQLz+cbiBJeTUa4w6ZOS+snlqe348RL0Y1:x/LgGE5MMPGd+eV1d1
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/2.jpg
- Size 39KB
- SHA256 c070d00213311032276f33224558080b43145e2eeaf236037e981afd89409ba9
- MD5 6f9605393f308393f80c6a4ae655994c
- SHA1 ccd32dbed41aa506bd010a98436180fb3a3a580f
- SHA512 5559ea44c11517710440dba08562cdf5b0740f6be7ff072e6c96657a677cab3c1a5c81e986159f014bf8c8f1054f3ab65f1da02db61e53570db062621802374c
- SSDEEP 768:IJI82FHUyiDSJLMfZip/a1RQbo8hZyEas+6E81LH/xmfgg3i:IV2ZNCS5M4p/a1ec8os+6z1L/sfW
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/20.jpg
- Size 36KB
- SHA256 9fa34a8f2b58b83f16d79166087a76666f9bf9b3582df0192d2a58ae78ba2190
- MD5 de86a0c25747a960e5d0dbaa39dd1a06
- SHA1 2549192bea7eb0d04f7941050e4e89a7f901eba0
- SHA512 a4ba51ce7f5789f3ec484c28d5b0bb5e6d6fd5a056b042bbd95d5001503b7115eb46060beb3931209a7177f36375335f1493d823855aa65fa0e5cd1bd173cbc0
- SSDEEP 768:KikmoEGgKTHx15h9yf1KYJrAqShrZ7bRRZXwoE8X7Lmpa2hH6HwoaHSEZ+y:lkEwTNh9y9KAkfRR+o97CrH6paHSEMy
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/21.jpg
- Size 35KB
- SHA256 984060cb7d5b0164b7f5ad557383420753c69665d461a5ec3cf9405bcb43b674
- MD5 8eae0c4333cc0dfee661eaa2b3bf4964
- SHA1 b2b5fc4cfb11548d5b36f2e33211da64c31c1c8f
- SHA512 45ebe119adc27eaa1947860e8c8e58cd9f476d1b50f5f16e45250d66a3d0cf3d65c0fdd891c35cf3112ca8cc833a1a0848108de1bc608bc9deb2919ebf25272e
- SSDEEP 768:K1wggmZoI3cH4j7d2mJQ6Ot7vpvAiMtM31Fb0vcx1a7WhUS:KKhcoq24fm7vpoLQ12ca7WhF
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/22.jpg
- Size 9KB
- SHA256 d4b79433ee76c4fee4610064f86f6d9b1a6155177c91658f13628afeac4335ee
- MD5 0600307eda72c9b66963a7e36a2b1ed7
- SHA1 48007d9343dad91f62da0761b679ffa6f775431d
- SHA512 97e0c2f2fb7e8535eb5447418f122fc57926a8eaf99702ffb08c55a1f11b36c978b51fb41d393da9b3aef14d36e443345fcfc528a20defd585da4d974c08bbcb
- SSDEEP 192:gWLngsFcgl8UUdWBzOZOyOhDlxg1V+sdDlhJGpXllkqicfPuwkOIHyPqb:1LnvFJrUkgYlxi+sdDEpMqTeVnyPo
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/3.jpg
- Size 33KB
- SHA256 5c1b26b61b9a05ee3538883782c0c71f0242e8752cfaf6cc630b12c488b90b81
- MD5 340193296068da8dc7f7f911969bec0a
- SHA1 2344e82f0aec3a9d824d0514524bc26426de06b0
- SHA512 3a8cc4a0c17d17b8c239fafc93bc8a27473d22c848bc88dc6cea305f42eec6669a4a4be04ca885e63ac45d5181866cbfb70d44cbada888466a8d28e5b55afb38
- SSDEEP 768:YnBynJUrOQVX9Hlm58csmW2aQWrDw8jx8k4xF01zzG8w3:YnaKFm58fmW2GrDw8jmkrnG8I
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/4.jpg
- Size 30KB
- SHA256 00f2a5834bfbcb56e8e582ae1daf881424cae9e30a5ffe59b1325879ced7876f
- MD5 543344d007873bf40e78370ed7971035
- SHA1 623db729be3ee81f1aa85468999579976faefb77
- SHA512 57a0132b47c07379719002cd03f007424ea51507973eed62ad507b6b2824a439ad9ede2b99830ef5f86943ea88bfdd0f348a98f29afd43b9f6ab4d3b1ca86e8d
- SSDEEP 768:xqSwvNRX8kWgDQaGXDTQg8n0kvVKtvh6LLzj2wBq4zx:xANZJWgDQ1XDTL8n2tvhSzj247x
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/5.jpg
- Size 55KB
- SHA256 add570765cd8a7a600bbb8a18d56a44bfba158e649fcc4fd7cdb2cf9742a42a1
- MD5 fa56ea4497f8a0273f4224b975eac2c8
- SHA1 8cfe496b44424566df59d368ac8aafceb449927b
- SHA512 298b1679abd0f46a972025f9670450b82b1c8abaf9551da3196e7b51afc176fb3e17596b7c47df85323e6e095d69c533283f47042c1ff8deaf5930445e9151bb
- SSDEEP 1536:t6rBffXbNj5u2dYEuvclZpgKsjSSkLw6LI:GxVTdYEYclZJk
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/6.jpg
- Size 39KB
- SHA256 3ffb4ae4bab230d3b52b45b55c4ce5f8118db9c436f79b4fc0995ec6a88f1098
- MD5 80ea011c7a8a8dd9365bb37c35f43152
- SHA1 f05e6718cbfbac12299ede3b0226e3fd86055a76
- SHA512 28a787c977362aae63db2cf6312037efa5876e475ab95e9dace956518cf46f09729bd2f7b28a752a2eaf9750cabe01924187c3c27876cc48b73b2879b5dca1d8
- SSDEEP 768:vVSqUo4AI08wdL3B1uGqe9GuRPtBmFlylpCEv1BpPfYv6:vVx2YBFE03tKl+pCEjpPwv6
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/7.jpg
- Size 49KB
- SHA256 ab69dd5f9a6971deac63708035a4380b74e8113c696d4967f2aa81e0b8be240a
- MD5 cd19be2e2be6b3606019c3e3e03b1d3d
- SHA1 367fd9ed0fa5059f53f9607499f2449f9b7d3e70
- SHA512 5198a2256934ee937f512c7a016d0f67ee1bebe914f206596245feb37ac31f4000561b69af6e9a8639e6348c4babb4cba2018ebe99d4fc626189938a58eb33cf
- SSDEEP 1536:lTWXJwdc64AJIyXrmOxDIvK1WfouUirzRWN0l:oXi71J/XrP1IvDfo3ir0Wl
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/8.jpg
- Size 126KB
- SHA256 72f199f552feac75398d6efb1b6d684006b060c790af636aa2709cf083b19960
- MD5 f8bdb1601eda2e6ba23d6028fe096ff0
- SHA1 81e852ce080733070355b43752f9b54648e1efb4
- SHA512 70f6df390f62906f6a0f8574373644929338cdfa3f7df7f24e95049dacac09802a38247ca6f7954087bb62bc691bd609e911b5faffb762d80cc376d7896cf84c
- SSDEEP 3072:+pS4jFR2mqtzWaEfdr7R5sYplycvX5g7zIxe/RIPVqlgc5a:ToFUmqlhE1r7R5sYvTRo/RIPM2Ma
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/Android/data/ir.dariadar_iran2018.torshi/files/Ashpazi-torshi/9.jpg
- Size 33KB
- SHA256 55f8948bbcf3320e846f0f1b302d23b866a2ab7b5225486662b54ec40d7424e2
- MD5 10f7a9fae6a1fd97469df5ec50b7fd14
- SHA1 82d09f983006a39ff63bc447e9f27f9ecf9d21d5
- SHA512 9e0ea9fe8baac48bbfcb1ed788045a1106c7c718af4a656e8f5c46e7924ab78defbc000b89705f970d1fd0a5ad231501abba0156e912305030269979040aae0c
- SSDEEP 768:l0QCqrUFD4Y5EEQPuPy3WEcB7wcaji9UJOmBFfPO+G51L:l03qrUN4mRzaE1wU9UJ/6
- MD5 SHA1 SHA512 SSDEEP