Analysis
-
max time kernel
38s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
22-05-2024 20:07
Static task
static1
Behavioral task
behavioral1
Sample
68763244a32aede477dfbcbb3812b922_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
68763244a32aede477dfbcbb3812b922_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
68763244a32aede477dfbcbb3812b922_JaffaCakes118.apk
-
Size
4.1MB
-
MD5
68763244a32aede477dfbcbb3812b922
-
SHA1
3e0b582650f74b9ddfc62a9fd5e898a68120b985
-
SHA256
3a4bb1dcd8196db41d3feaa5103646ad14aa1dbcb7866071f16da900592cfa2b
-
SHA512
35c323fc90c77a947b60e3a2a53164676efc292f5494099b4b6c65d3ba5db9b369284e56c60ef2fd6641057a8637decd4b698b344202a8b09756d480df42bc5d
-
SSDEEP
98304:qPpUoXAdX6FgJJtCWFCcfLbreCftu6ueF5cAD05HUKEwtb+Zil:O9XAdPJJtdwcfLbS8Ln+9tb++
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses ir.diamondapps.televpn -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.app.IActivityManager.registerReceiver ir.diamondapps.televpn -
Acquires the wake lock 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.diamondapps.televpn -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.diamondapps.televpn -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework API call javax.crypto.Cipher.doFinal ir.diamondapps.televpn
Processes
-
ir.diamondapps.televpn1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/5590d4e7-14d7-45b1-a8ee-463176818780.jobsFilesize
236B
MD51045ac40463601d471b1c22024e0a77b
SHA180c541178cb9eabc55715dc05be2c742d19ca762
SHA2569246c9cb31a25be5d7a170e7d6a49faa54ca0209bc8f1e85266b2e3901d047a9
SHA5122e21dbe8dbab4bfeefb2a61db8da0d3334d864824944b2633c552703c881a1bf3681161c9764a45726da0bccfb31b9b569719258e073ee50d7e7a0c076ee78be
-
/data/data/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/b583d10b-8ccb-4b7f-ad94-6d40013b0204.jobsFilesize
134B
MD55117e461bae628b12cc51a5258fadd8b
SHA1c1e7fad09729f35432390e2883780b40bfb7cfcc
SHA25674371df998cea23266af659b4dfa16004216ca7c92b6100372eedafffb13b4bd
SHA512afd157b112d3d67b2392f903e3472792f9e0d134b4e8a8f952f843090b25eb9e9ee185071d997107aee762f3fcf680c3197b3672d0a31973876a1e8ec7bae542
-
/data/data/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/b8f8b935-ed32-4e01-87aa-3cba28d3a759.jobsFilesize
758B
MD55559c898457ab0ff923040323e04b8aa
SHA1c326e3a18d714cd062a39058ef1d8e619d021426
SHA256923176bfd09b847905c1a403362462e38f211561920cc55c567cae1824c11fb4
SHA512468404f5508450c357238e30f0732d3dabb6e9fc7f75a91abdcfa05ff6b108f95242dbb98210b81c66c3274d0e2e917466dfd521067a0dd36f3ee77864899044
-
/data/data/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/d6525cdf-d0db-4e59-80db-0ed53651b5db.jobsFilesize
134B
MD53e33a098f93065ec65683a6f7f25c920
SHA103cac349372df3ae5b4b2f28baa641281b679774
SHA256082eb2e89693217129d4595f83c6664a293b8bf8a4e2e41cdba8380b5691ab22
SHA512c7a93242e897a2b0b297893a9c660205e55a9c2588fc792c2a0fe72cfe4b37637cbcc4528e687c1b350b0cdbf2e1c2124986167033ba18863ca537d691a57897
-
/data/data/ir.diamondapps.televpn/databases/cheshdbFilesize
24KB
MD5259a1e4e7ebc4b0d0341ffcf0c3bc2ea
SHA19b8da5a0b24833a3e84567d9d8ee0d2f54d7b48c
SHA2564f4987ac3d84abad3490459fa7a32b7bfadaae5f329e15dcff36e07d34faaeb1
SHA512dc1296e2b0b18dd83a3782acb700e155ea9a60ef193bfa8c98999e7cc3c5b73a97c20a974cc956ab438aeeba812ec2d2f401fb2e714bb9bb5fb421fa4b7a2313
-
/data/data/ir.diamondapps.televpn/databases/cheshdbFilesize
12KB
MD5b0ae2e0835ffa15a698ab387afe5dee0
SHA17eade99c493192e7114ba0e591e8a5d8bd67b525
SHA25604990f94b9a219726403e274b64c8a2dd50a82326914ac3934d2f12050a723bc
SHA512a282b5bf0c0c1976742354cde6d26d7e9a97b0790f624e3cd5ed950b6460713861550cb71338ed1f16681feabf10fc544d9658672cac01aba94a4ae6060cee73
-
/data/data/ir.diamondapps.televpn/databases/cheshdbFilesize
20KB
MD57a8cd9e26f4bcc5b8eb42772a6c98351
SHA1ed53ebaded843a7df2edbf53e0684bee592a15ce
SHA2560ed7a54bf7eb626da039626e4832328316b00d7da9b5619b35c8a79cf3246cb4
SHA512e9be37a15247e0d569a3e7a12ebc690b4940df56897576118c6be3667deaf0135aeb7dbc2ed3a12d9da5beb27d49ca888ff6e868ee98346be75a2c62b884a6e0
-
/data/data/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
512B
MD58ba1886d520be3b39b7805b7aa399666
SHA148bd212ea11580321b61b61dd5fb861a4c235215
SHA256daa06383474a59a6e7e22d47d20ed9647a03851f73452080b5ed1dae831e726c
SHA5123e7a62d075dd679c2aecf661c230d802415bb56ec7bba19b64a20dbafc85cb58f54341c058c9db7a7a9037879a876210e2bc4dbfcf3eff75a7d9c32e7d7c7282
-
/data/data/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD51c8fb8aa206ca6d74f29a1422716d2f6
SHA1d6b202525b5b0b3da4d65229bcf14a064689cddd
SHA256948b048206c99c75c459b4311721c515cf11043b25f2361b8dcb2ecb450740f9
SHA512511066d73bce2c536e1d45d27218f2ef51ffd4069bb08f72f62a6dbf0af45605ed9a8f8134ce5d516b97be2d9eb973cbc32faf82169bcd631afe256636cd056a
-
/data/data/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD53a2828c97ad3879d6421187f28ae4bf6
SHA172ceb67f21e3f794cc1008d936e8ed6d74c27e90
SHA256eab16125fd36a6f671ca6f8c7c3fc431cc82fa30c5411eb4336cb00daab76e60
SHA512a51c9de8a9f7ba2e66d18ca1ffa0c09911f9829c37afdd91286ec12a84fefdac65b6498427307136b438e4a2f075efeb39274752c4a7b9dbb495a9b18418a1ca
-
/data/data/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD5480dca4e1a4ddbdd9597329e298cb810
SHA18fa3185b523c221c2353c79d209122d4d5b3276a
SHA256b3e7948d728919f60103733e0b66c2edafb94fd1d76fd3b897ac883b8c7e9212
SHA512c263a69f9c82fa8927ea983f32404635da39ff91dfd0a6e9e52bbba8ef6a253ee5078144a0e069e3cead5576fec37a385bc51e917d33ba36968ed0a9b63e8bc2
-
/data/data/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD55819692446dd297ec1109ffea45a76da
SHA1547b4d2c70727a7c62ca6d6b0d46733f9fed76ee
SHA2567ce56f9d3b6ffc8a66f8083120c0ff9402a9f3f4a47c47131274f15b4b0359d7
SHA5122d80abd0d18dccca3cd8bbd26863b9002b3229f35d30a88627fa6abc946cf59ef98f437e8a69845837afbd664fc2aa09a87d7b9deadffe353dd724ef3e6e8668
-
/data/data/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
12KB
MD583347fc7d9ca71c5a708f23f88dfa2d5
SHA1a3c810ce06503e38f66bddfed432a6448d45acf7
SHA256692e144a27b1f65ef6e7943a7fd2b58812a038e6d8e28203e5dd0198291996d2
SHA5127602985fb4ecdfde96984f49b0c7114288248004787b70133efbcf9f647b036ac9d4d99bb1a69c001898cc050c24c6f513064077f03b7abf882d8495cf11292f
-
/data/data/ir.diamondapps.televpn/databases/com.google.android.datatransport.eventsFilesize
32KB
MD5ad7bbdcce258ba21d0a07659a3849e3f
SHA1887e17f38cf736cc82125092f6cadd5753184286
SHA256a6417906596802ee2a80cd22ef848d832848a6f36f4e45d320e9b98633a5c456
SHA5124519d5aec86a163c9c2c97d1cf9862cc9b421749c0d78c0f4ceee31c9fe07ac557e736d5b3f72942e2d5d44b578fc8a6789f2e7a3ec98ec2199fdc50dd3ac45d
-
/data/data/ir.diamondapps.televpn/databases/com.google.android.datatransport.events-journalFilesize
512B
MD563a281fdd6af373939de5b9a7c0ec35e
SHA12b3cab366bed2fdf4fae3d57f594c2551edcd5af
SHA25607a82538b626d9e6ee2b10aa3cf0e8202a6f041216ba5632ea90fb6308181909
SHA5122f5fa8b05f0a06e9ebe3918229c6b774aea02ef374cc18ed1a0cdd86048bd2b4e8c66ed0ec6589dc6f417554c2d34e00a87f0490dd22eff2e3e7934e728ce883
-
/data/data/ir.diamondapps.televpn/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5d2242b4e42502c824d63e4ad73c4279c
SHA106dc7d976da77858a589f384b7ac1001a0e4bded
SHA256a6d504fb93ed3c2ef014b1153784fc298d197404c8939b1d7254fdb067353126
SHA5122594d788d2cff46fc2f311c906de221d6f8a888d1070ca7a2c50af11ebf8d695b254396ae26fe2a7a045e614a6035ccf4199ed59ec94d400df17c3cc72f9f775
-
/data/data/ir.diamondapps.televpn/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5ba7be22da0631baf4f9c7420371b93c5
SHA1817133522b6c6eb52c3d4cdeca68aae6be9eab9b
SHA256165a0897d852a4d3f221ef2d43e2fb1181ec71eb23aba6d1650fcb8ce9666bb1
SHA512e30d2f32a0547ab59a08c240f0c0116cc785200c0102cb98f7e2325d769ecfa2ef2a4f88743be114113ffc4ccb26bf6610fc5fa9e5dd0f874d74cf0083739e2d
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_managerFilesize
28KB
MD53369e93d584904099f7ce3015597f425
SHA186f887e783527186b18242591738f212deb53d00
SHA2566dcec7146d3b80d2970f670b2644ba23b2aa25d9e496d7bed91401b7e7438bd2
SHA512ef3c3b8381a3be842a8650649d2b8cbb5027d5f790727390e636c79b248453e6eac656678bbf514541ccfad9ef8279ee75f7447f2077017477f56df58bece09c
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
8KB
MD5d405656d31e0c6e9116792c81095e47f
SHA15a13f07e90a421a5502cc5b01ba95866d7eda601
SHA256449c58e57c7441a5296116531acbf59e634943a16319e02d39852c37e68b5e9f
SHA512aae0fa19b3308b955054a18e4dd4f2f695bfd8ac3f7652696837a05753d40487530c75f94b0cb4a1aa2517f64bf8b065830469f3c15de75a2e7bed3ea270ad50
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
8KB
MD50b27c04200b2aac1a4e698586bef7085
SHA1e56f4a336a38a56b0ff91a7b7d4762682130da33
SHA2567e60089016bc7b519f6944bced8de0df186104e7d7480e31f3ce2bed60927c92
SHA512e64b6ffa84cb2f03afb44d76e7bf98b57d98de4cf47bb18ea2152e19769085dd1375cf135ee0b29109127043dad1dd9311b364f2602713426490189474e6eca1
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
12KB
MD59e4d3d6bea8af116da3d5dd4469c0c8c
SHA104c0496762ac49ad63cd8bea17f55cb9433b69b0
SHA2561ce821e28ded96ebc9c93d95ae2f1c0b64d02518dc9bc38171354f548d0ebceb
SHA512a03bb82bc4b1ced63a7b85290ff9a974f1c11f82a7d498f524aef0ed27219427b84796feb40cda8e456390784944c17e0b2edacc3c804a749a19afedf5e134da
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
20KB
MD598908632a4a5fea664f0be1b0e627497
SHA106907c5b034abfbcc3aa71222a08d4aecc78886e
SHA2569196a69ee319808f4c5f9ac5a2aca67cfb1863667d7c0bf6f0352a37d3d83a91
SHA512649e9d6b816ce1a2192aacdbf9658c72e725ba3becf1df4c19557f75d7529d1590bf8df580e2d7973ea37de866c92d96c35b94c2d9d7169955ce12094eeca026
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
20KB
MD5a600ce6de9db2bbce73a024e389f28cc
SHA1648587196ef8fdbdf084b78b59a77f250ed9861e
SHA25669cdd83ce5627b73332dd91a496c578712750bd22a0f7c190c2fe53920876455
SHA5122b074d657bb6ca70716e3b601cad53a82f6e19c00bceac08e85c8b717a84c1d31d456df267b2be97d250b60b7d0139e0bc1e46b96ea09f28f64a2c78a47e6d1e
-
/data/data/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
512B
MD5e3f009628a5a54540d3c8610d7d7d3d8
SHA15f2b34bb3d64bca5a0bad72e86bed151d7ef065a
SHA256f3e1464cbcf7dfbf9597794ef6ffe8309cca9ca149c2dda00cb249cf36bfd465
SHA512ff839d55bfcea0cd6d5d5147452ff6a890ac36fa0d98161483b6edafe446a7e34afd709467629a79e06dd6389aec5ec4452a773a5d27e998d792ce4d8a92f9b3
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD5849bd5a02d2ed7e2dcca31025a442467
SHA14bcf120b602dbf6fc13716f82dd28d202c56c498
SHA256354dac000d3ea14bd87e11153a872a1882ae13c1094bbba223f6807b065ab2f2
SHA512b4ac071946c5b6c9220c43aa4deefddcf6718442792738ece5d1fa3b30c25111dda7bcdab1ee4c77763ecd5bbcd6615c02ac35e145851015c056c80fb9023bf5
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD5dc685899c612486b51b9a3a381bf2033
SHA1e0632dca32fe961c534073ff8e534e8ac21ea785
SHA25634fe52f69110fd780f52a5e4a09237b6c74623fa070435c81c1ac843deaff369
SHA5129c0a9adf9a1df241946b84d3f98088342d2c11b267345f23cba993f6aff2d9d26019cb4a0aa8b3d36887c703de8816368a9c17e22425585a1db9e2a68b1df2ba
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD53cede31b99525988d2c1e110cd336a33
SHA19b9a53eba581c958cb136593b101ff9c3b5a2b05
SHA256a5e71254e9c8fd2037185d9797bf96469eef85737648d54f191973a53d43a533
SHA5129171ffbbf055c95b398c3a6a36f92508c7bf89b3c43a4eea2927e5da1a309951f93d6908a1748a4aa4c15c6a5e91d14b8ee61614c5bf12fee89b3f4a38166f76
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD5660b95c3b8c6c812066d28f6de787630
SHA1f65cc0d912d902773107a305502dfb2fefe6ec87
SHA2568f604e6657ead4d6dc22faa4b4fabb9ac85ef3cfe930573ad9080d3dff9c78ec
SHA5125ce46bd1cfb4e38fa54cd54c882d9ad0dcaaa50caffac344d3c8627cbb001a5c5738359fd2068339aa4ccf8ed50cdfd8bc3b39eda5420c05b23d58f81fdfad49
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD55cd9d8afdeafc658701700c56f56f103
SHA1560c9a18ef7b18c34cc1b5a2f21f430bc4a7c01a
SHA2561398ee848de2b0de1ee1b75b520842015cf3430fdf70aa8d0acd0e15c04a1e01
SHA512f38773830f5d280ebf10304a29e50875dd2df383df41d8678ce68551853fc92d2a006bbf779e00b9cec5172d8ad52275d0a67d673dcde61e92031dc5cdcdaf8a
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD52f1eeee3602c828b8e9f81f6fbd20d41
SHA1d240b568bb6929702815b9a5edd05ad635671caa
SHA256458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
SHA512a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
512B
MD57195ae3f1be9e42064e84d74708be3fe
SHA14c4c1d7b1024d0f9abf285f6f30ab9d46c56fd0b
SHA2561070a937df75eb6ea99a29a51863f633caf839f6e0508183dad7e710c5e89ecc
SHA51255e58a4128c6b0d9d0ffac4a34a398bce08c244c7666ede0502f66b0de8311a1a40b4ba4258b5fe36f790f03374598c60205468dc205e6c3a6d55a15b13343e7
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5c11cfe4a1acde880c4b81e96b2f1c7dd
SHA1260a783589be687cc0b7fbbcf07c66d1b1029df2
SHA2562fe0d12ea28255f4c883f087904b97098c41008714ae997307c0475a82d7c70b
SHA5120a2430d7263f47d89adb5961c5b2645b44e4fc31c11ab1440eaf996a79f0ca056b93f97fe9095a2e067afa75ed4c8c09612cc3ed12707032cfc1b70ba9ee00f0
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
4KB
MD55df3191aff1086a2bca92fc4dc1dc8ed
SHA15b1cbcedc04184215dbf26ea4074812d915d7c06
SHA2561627adcfb313cbde608a0f306ac4efce5cbc989c5bab62efc4ec2d23e436812f
SHA51203cbf3fa92c6898486996964a73cdf0b21db5a885f642f7af8457d0a9e1128f9e88bd27679d8ad657c1f296bdfd5d1eb784d4a3663c0cf5e446538b10b20145c
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD53d1e89c212b9a16d3578291f6f5617f1
SHA12484614b1db1336f8b7d77ce5a48b4bd4f75fa60
SHA2562272b01b8ead6e2d7ffc17b442d499cb88fd0a447ed8cda2f8bf26e394fd7a94
SHA512a512e290c3104442c154befe9ecb4e2a28c3f639b1f39826d1cf390d67d85ab2f7d7216e469d550644b279cfe271a36b5bcfffd3595f0b27f3afa3844c7dd8e8
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5aa18cbf2563b3dd101a510f5780a0290
SHA1d61714a8c79effb4c5c4e970c8eb382fefd00a7b
SHA256f4a2b41d83bfde45938cfdffd55f7120ce8a35ccf95c0bda9b5a921dff279c77
SHA512158d9d1334302a6adebaa7d1ec4d36e88b0ba3d9ba572dffb6b924d7a293bc0b19e175c07334aa7b9aae8f9caa71de514c70f47d91e0ab3c80f868fe93d8c516
-
/data/data/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5d37fb1246f3605197afe568c14ff824e
SHA1b63669100428363e3d51c1055137859ebc4d602e
SHA256d7c2cfcd42947e9f7c1b683f1e532b7e51bcef3a4b86b37ac40b0578d3217814
SHA512a9f2bdc578d2eb0d090f95e326fda3de72b15dd8891ec6f4f7558d03246210f089f2d582da059f33323dd5b66faec7b1280a0884ee55bd1f5cd7d88b9b8809f3
-
/data/data/ir.diamondapps.televpn/no_backup/com.google.InstanceId.propertiesFilesize
63B
MD5eb4782294adb4c632020178301ccc61d
SHA1a253f425812fa7fcc15eefa065d1854415ddb149
SHA2564b1efc0036aad1872acfe55f3ada37d7117c846d858d216e514308694fe00881
SHA5121fb70a4bdf16f143a52e248b674909f4784880911ab17d943686cf3f38ef0ebbc0539317bf37677b01cd22c638d5c4b4d4c4715af713d28365679bbfd617f978