Analysis
-
max time kernel
35s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
22-05-2024 20:07
Static task
static1
Behavioral task
behavioral1
Sample
68763244a32aede477dfbcbb3812b922_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
68763244a32aede477dfbcbb3812b922_JaffaCakes118.apk
Resource
android-x64-20240514-en
General
-
Target
68763244a32aede477dfbcbb3812b922_JaffaCakes118.apk
-
Size
4.1MB
-
MD5
68763244a32aede477dfbcbb3812b922
-
SHA1
3e0b582650f74b9ddfc62a9fd5e898a68120b985
-
SHA256
3a4bb1dcd8196db41d3feaa5103646ad14aa1dbcb7866071f16da900592cfa2b
-
SHA512
35c323fc90c77a947b60e3a2a53164676efc292f5494099b4b6c65d3ba5db9b369284e56c60ef2fd6641057a8637decd4b698b344202a8b09756d480df42bc5d
-
SSDEEP
98304:qPpUoXAdX6FgJJtCWFCcfLbreCftu6ueF5cAD05HUKEwtb+Zil:O9XAdPJJtdwcfLbS8Ln+9tb++
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses ir.diamondapps.televpn -
Acquires the wake lock 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.diamondapps.televpn -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.diamondapps.televpn -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
ir.diamondapps.televpndescription ioc process Framework API call javax.crypto.Cipher.doFinal ir.diamondapps.televpn
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/60ce51f1-f09b-4f21-92f8-5bdbccadf0a2.jobsFilesize
236B
MD54eab5bc58696f956b3a622a62c92aad2
SHA100741342220df9e79245d8b1044451421fe384de
SHA256b179fa56de05908352465fabd3ae316a52a07140f8cda1246de10809833334bc
SHA5129ef58e315d3902a38b23680e8c2b3d534e992f77cacd817198617c1c28c12617a1768513c3766ef57a1021c285a3c9e219ce4eabfb51856ac4fe10a95622a307
-
/data/user/0/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/7c99468f-57ec-4462-9904-4b61bb3e96b4.jobsFilesize
134B
MD55117e461bae628b12cc51a5258fadd8b
SHA1c1e7fad09729f35432390e2883780b40bfb7cfcc
SHA25674371df998cea23266af659b4dfa16004216ca7c92b6100372eedafffb13b4bd
SHA512afd157b112d3d67b2392f903e3472792f9e0d134b4e8a8f952f843090b25eb9e9ee185071d997107aee762f3fcf680c3197b3672d0a31973876a1e8ec7bae542
-
/data/user/0/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/f1baf974-0759-4f58-b94c-aefbe67af471.jobsFilesize
758B
MD5d3ca495b220a12928852dd732c4b37bc
SHA14fb9933d85845c7c056a7e6ff4b18c0b27026b74
SHA25613a23cfd1b1ddc49f7c75721006662ab8dd2fd5ffafcd36c7750aa07966ac02a
SHA512646d48950af1a9fd23c6246816e2fdbf45776c364596db0f6d797e294a462fe720a91a644887ffc00a975b7c6e76d7eb0145fa156f3cbd35dd94bd692ae4ab39
-
/data/user/0/ir.diamondapps.televpn/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/f60fb8f9-50e8-4672-9d02-faa481835af6.jobsFilesize
134B
MD53e33a098f93065ec65683a6f7f25c920
SHA103cac349372df3ae5b4b2f28baa641281b679774
SHA256082eb2e89693217129d4595f83c6664a293b8bf8a4e2e41cdba8380b5691ab22
SHA512c7a93242e897a2b0b297893a9c660205e55a9c2588fc792c2a0fe72cfe4b37637cbcc4528e687c1b350b0cdbf2e1c2124986167033ba18863ca537d691a57897
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdbFilesize
24KB
MD50660d3ef5f0245096a9fa0f61d6a8666
SHA1282222362a5a05e3153b7f6b49ef35c667b19542
SHA2561091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
SHA51218bbe88051278314b76611bd68156ce60a9c3af3818d39991fa58d28bd9bcb8476eb00ef52ad8ae7d16c1d7ffcd9f2e8a858e2fd806ae59b5d85a8c3a9ca12a7
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdbFilesize
12KB
MD5003824a21eea663089a1206722b3817e
SHA113a47a0977ca34dd3a22dbbb03b57e37b453c55a
SHA2569afd71f8fc75051246d5949e0cfbd6e4774dfd648dc73118928326de41b5e9f6
SHA5129b5d99f99d9c9a52c5e18fa3b06eb6361e7a492115c7c07e1f4b21fb5c71be5638efdbdfc5b7ae5f6da219c1ee193a1c1587aa95ada29f8069de16aaf12f1bd5
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdbFilesize
20KB
MD543af78a6205d72a43a60ad19a141bb86
SHA1c65aa8d3f6336446b144bfe5912f61e2335c358b
SHA2567dcb2b8ad120d418c9f37bc4e906c434adc9bd9b0976d27fc23a422b757e7023
SHA5123cfcd26a67e00af3a9c8659cb2c36b75e78bd4c7335688beefbc43155ccdf261644d4aeb76250977c049a3e044657feb69f6affd0665e9a5b71313fa274a3736
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
512B
MD5022a4c3735fb3ac888d84dd1e523eaf0
SHA179bc020421dae5e0465dc5e4861bdef25a3347f4
SHA2561b3d9aa19f9e6709b027755a96920e1a713ed2cdab80898a285a59676e853e4a
SHA512ea67d07cb027c5824a76754b346cd369bdcc7d8634d9fb68ea78224575cb390d40e89defa66abd14462e00b8f4046c2e3e7705643be9e077eb29890dde3316f7
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD5653b196e61a756a6f271e80ec33f2258
SHA13344bb5a828c87ee0714e77d56e3653252eb7e79
SHA25668092e748d252eb4b376c56ccfc28e0d6e9f4c7908f048471cedc59638864d4e
SHA51243f7788240a6a2fb88e4e38ac3960ebb4dfd3911ebe8460f496c584b517e298cfb78d8ef8351875060beadd76e677314a36d852bf59f0899eabaa7ad9598ff78
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD51b6b57aacca9a9ca1f0b932ca06d1957
SHA15f56310845729cfbc5afc5f4da243e0c06169344
SHA256e3cc7ce973d833d40f757e77b084fa29727ef71774de6b98f401eb3512eef048
SHA512a89315676355064f63b8bb3d63cdc1edcd5e55579cdb94874b062585b3030a716382ff10bdbe32730209962a03ccf6a874b6ac2b33d1e3dfdaa6df2672470c2a
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD5002e786de2a50eee3c9570d0cc4fd189
SHA10b08f57dabf5fb6f757de99e24abb494660f5064
SHA25622cb16f430331393deed77d474d8a744b4ec3a0e9422d029ca4c141fecf33431
SHA5129b3d68ca4d19510be7ff3f301866a43fc0d925702952dbdc6c6389ba63b70890cd3a23aa4064d997d77dc41f97c1243a803bff25e919ce4591685f9f8c5d8b0f
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
8KB
MD57e78601e75203c944dc90b449225f9e3
SHA10b1f81822b053fcc88ba6d3045047f84f238e927
SHA256b47eb507421557dcce9d5bbb54407fbd710ac8bca856718dc1e45f27950e8393
SHA5120f1ca88b16d8da6c98adc5065883e2f118693e881374dd02fbe28587f7605eaab4140c1ecd349ee20fa02e8806bc0717891997e4864b800be4863f91e63d8f94
-
/data/user/0/ir.diamondapps.televpn/databases/cheshdb-journalFilesize
12KB
MD52a0a8c942bc4a327985ec644c5b69c6d
SHA1979991fe39cc02f370163a14d78b38b10deeedf8
SHA256594d3f9df8eabe7801e1b3f407eada4656a5cb07e995bc3c2bdb57a5f3f9bd4e
SHA512941c55e59073059358ebf9134cef7ee9628352233f193cf28b1b98fc252e2d90d76cfac79a4e1eb1467d00e9fed1da3afe9e6342ce4f4bc9099b4347b1b0eecd
-
/data/user/0/ir.diamondapps.televpn/databases/com.google.android.datatransport.eventsFilesize
32KB
MD57daa8bf70cba1177c0aaa35143f5ff54
SHA14ddb8e3e373296808fd5a3832a454ea9c0c60b0a
SHA256f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
SHA5127178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f
-
/data/user/0/ir.diamondapps.televpn/databases/com.google.android.datatransport.events-journalFilesize
512B
MD5f1012af611af1149febb1c3897fb1fa3
SHA11d4ce195db4414e2f72a316fb7b7685e14c5dd1c
SHA256c13a4c8edbb57b2c4b0b48d41145a329508b2a47feb7bbe23a02185755c59b73
SHA512f8d976093feac86af63fd9de36cf68bc08f79ae5fe2b77d69e7985f8bc78e5807fb7e3d04f9dbafa5af27dd4feab64bed0357e55d874c7f35e9d37f2949e3378
-
/data/user/0/ir.diamondapps.televpn/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5d10dc7de74247e791e76b002cf2f18f8
SHA1c10b346724e13e8f080acf1c38c7c935b2b12156
SHA256a4870a3a04dbf8ec8e536fd8cc6256dacd846a8d12004c17bead0f191b39be3e
SHA512c5cb670c0bb34fd07aea5afe6adac7f67ef0ea47e35227df1a868f93feb6c3deefb77ec4fbad2b1136004e203d136e8345e18405563a545634232c68af772063
-
/data/user/0/ir.diamondapps.televpn/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5c033bb69142f136bed509a5d69c0e58d
SHA17d23b65a4a0f0f7f45af68d6bf1a7fa4e9cef156
SHA256ea61bedf6a7541f451fa179fbcd52cda2e16bcf7fbda34c1e67b4b95b67ddf99
SHA512eb3aee2887cbff29ebadf61a1378ac5ea315523afac488a8c08be5b4041de243ee98f4de5c25628504a64b0f3789929619d6fff0c8a717b3019bb80eef2ff7fc
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_managerFilesize
28KB
MD5eed4095fc834c7502b9e207c28b95978
SHA1293bfac10e56e6db4b7dce5c95219d41e011458c
SHA256914bb884232bbd1e8e41c7725283c1d04b8e9b058b74f35ff3886a1b99433f3c
SHA512fbe65ed4ff8e9d23fe5830f8088351e8e3ca653d7c8a53c2386565c9a9b49a1d47b567e1fdd34c76fdedd90edbd90a4f1e6159ccfa47422c43bc353afbad9c0e
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
8KB
MD5d9a84866d01bcd6cbd93f3077e001aa1
SHA164054ae9b3a73c7c4125922051c3832396343cdd
SHA256ab64deb0bda1b467813baaebef2e8687815ee0a4c83fb4521694818a8d96cdba
SHA512371ef2dd82e09a3ab7c4f878099cd401bdc3a1c94b6a9189a3875fea4f2d63cc842175d9b9b9682252432bd7795d7ac901471a2660d386dd10481b9a38632783
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
8KB
MD571fddee73752c2b2cdf4e377b38a4581
SHA1334b2bae9c2e47c540b713a3768b3c69270482e5
SHA2567abb1d2dd21e24cb4fbb0ebc84e2b23408fb468d7e5bb980c1680d59058ab9fa
SHA512e74051eea94c7079c123e6b692395ff4cb9216a2788db4c21e65db4454dd9ed7552634899ca10241d2047eb845fa12044979e238a2d4bd92f412dd55b0b1a3fd
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
12KB
MD5540a853ac63ef80dbcae26f30c87c08a
SHA1e9670c667f1dc697451ff6aac8671361885268b9
SHA256bfccbb6b9aa87bd3c2bf4f770cc5cc85fc2a57247fc16d703ce8a6672632b7ba
SHA512721002b91feed571b8f2a76873e280247bfed06b1f1e9166e2c773266818cd3d6c1c20c35ec4708f4bdb27d1e8d4a4f4ba6fbfb34a7cef40d32a8e6d8bcb4b7e
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
20KB
MD5d85230cae39e2496059763ef163ab558
SHA1e176740f17c628b73d6a1d8c10dfacad03f493fb
SHA2566b4b7f384ff6fec3f54e1b945397203f19e25a6542e1b9a580fb85f769eba47b
SHA512b8336dbd7eeb8f0a97702d6f327f7556771eaa23babfbeac090b244e5ea0cab7db512b689786b2e2f201b51158f7d4758201189e3cd6c864883ffad8fb10f5eb
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
20KB
MD51642ed858f4303e8dfb5c36d494ca158
SHA1d573e118c76f889028ca02d26d97e8395b5c2ca9
SHA256995b6985ba492a5b29af6f38a34b2a55d69bd4ab3bec9d3392dfaa7b0d740512
SHA51241bb962acc77b6a51a351ba1ab8267074a68423c84d3997a7f373a01270e0ea312067290545250967821556cde0ead2be1af2085e4d1144d7e4d7c937484f42f
-
/data/user/0/ir.diamondapps.televpn/databases/db_default_job_manager-journalFilesize
512B
MD583b35346803c2d5042ddfba0e6c4f50a
SHA17704639a997c0f848da85aee2286c0958fa91789
SHA2563bb46c694d89024484c1fb40fee3d4928809f36230f8163014488b4a95ef9ab8
SHA5126e30c79bd815802f5df78292dafa6ba32c702600a69ae28cab534d66a12a492ac3aaef652e54a362b901239d0884651637d61f70dafec7e351589b53ed4c06a1
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD5be5627b499d922732efc932a6fd7da21
SHA11b55981a11e6968c5a87186ad4f1969b8a3f32fa
SHA25696b69ea7986841f636f84bc9f596de47d4ba665d5d47cefca6ef0e2a159c96fa
SHA5126924176617677d96542ca47f352bd0305acc41e048b549def669385fc6b35fa17afad2c37f54a9e13b0b4634d88a9b3823a53b276e8368f1bb192ce0b6439d12
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD51bf1b8f455d8117855676efcb8a9de7f
SHA1df4b6a5ee288d23f4b35ff300c97a42b92ce7f00
SHA256df2778132b01b2dd8ae2207dbb900827900a985c340964c3aa4fb1c3c8741d60
SHA512736898ad0da18bd751a596d60e4dfe3f7cfd9aa28b65c920bc701958729a27299746000bddb0868b1efc1d3ba712920306880df3eb9281275bb8fd16b5ddb612
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD577cb26a209e1134fb0dc8f3949805c23
SHA150b42b8506799cceef202b3fe90a25815b808842
SHA2565ddafdfa6ede1c6dcf8e8552d967ee9eb70e11220f8d21676618c391ecd7b8c2
SHA512451865df99415d067469f81a86fbbca307daf452ba7f542f3e78893e3324895c4083b22614518710cd85a47c142e05b71b15f9885e8a699dce8e54f61cf1d08d
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD5ee4e54134f9b690c59cf7a8ababc92fe
SHA1e49a5e01ea1b4bc7ffe124cbf0df78cdcc8336d5
SHA256ca16fd83cf5d685890a39686eef5844993965ab41978c4627d3bf971daf0d490
SHA512e48a6112f07652cdd1a2817b60008256199115f04286b6a94298962844bc7f509f9ab9bc9c93199835fdc3132590c514e62adba45096791106cf9e01295233eb
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.dbFilesize
16KB
MD540b7f10d0ab0e239aa91d56d866088f0
SHA162bf78e2588aa5c2c1a9c63c4e2e34d0f3e681c7
SHA2561f2c4ef2ecde7c5751e8187c5e07e3ce9d49bda8c5dc83c63e401bcaeeeb3698
SHA51227e68cf220fcd4d5377e93252db81bb599a566d35dce0c03ac4f047c6e3137262507d5fb7e11be48e71019b07518944f98d9ceb48f7d2ab9e9226a46da813e38
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
512B
MD51fc378552bef3c28b63bee5605ed065c
SHA1e151b7cd3a1a9ef046061f06b9ab167bd710953f
SHA25622ab162b93cb50f55de48f748ec25e28c53e740cb98d4fb451cdac8c0e4d5d7f
SHA512d6f377c5c0d82c00aa8ef0c2f0957eaf49123c79f6ca71acfa8de6a665d41e22868f2feb0a6c2fc620cedaaeb4d49daf3cb7d32cd374daae25f1c6b4e66c2d36
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5c807e3872ccb7f748c8a30fbf41c9b1b
SHA1261112a2998ca3365f9bf3906bc339161f8d5f13
SHA2562676dd6a98d55d4318818bd114f8e22a73605575b104cc6800e0cb3f9ebf7246
SHA51236e4e5b56f866cf2a3a4cff146ee2054b453ed9a1eca55826d1c344a8552d10b505b0d17760428c7ca31402157b746307f24217547cbeff03d93b3691c9b57c2
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
4KB
MD5ee62191c4807ee86ce3a70110187355a
SHA11df8b715f9a7318cc5fc423e08e852dd78bc3946
SHA256eb259ae951aa0beb236cce26cbb3a8549e544d13efb612da5edad84e56dda7b4
SHA5123eb12c4649c1a7dfe3565d82067c311c81c8dd015cc75ff36f12fc001cdd740e57be197bd09e853f1da7c1919791587c496949107404f65aa53f86eddb7013e7
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5dbe25c0deda1562dcbab2ebc8c3745ed
SHA1680500adc4aab5c2e73e5592de9577742a939b84
SHA256f417d15f7cc6a7525c539ccb64a384b1463800d9dd82c1b90518d070d41a9e7e
SHA512b343778c5b207a24ecab962a9910acdc5ff201875ffca299289ccd9b7d4b2188ab0944c07477867de47adb777762e8938726a0ff0790aa189e6130945eebe3ea
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5779e6e3a61b72dbaf714a990a924871e
SHA12f8460ca713f5ff30eb4340195ad36f7b2411bdf
SHA256a0ce14cb6f0ad042737e852941579b8e7619aee57e9377fee98614e430dc274f
SHA512908c0519d4a5f08cffa193e0d2ca5cb0ca75470d322b13fc08ca04cb27e1b0f93d169d73dbd4acc29303727aab2ec044b880a00ce647e23a7ad49590958dabd7
-
/data/user/0/ir.diamondapps.televpn/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5f0a0bc3121250d00b93fcdef243b1d14
SHA18504db599c38c4289557bd09f58b013e5a0f0606
SHA256887044789bfb86b83940a934d40aaddb2cd70db9061390f820312fa24409fa69
SHA512f465f03b5ff3bd5300cc97fb2208de643a3e2185bd948825918613d8a23145d58252d1378ae6375243cdb35d1be7c398b0f411377e0cb30f0c2241ee5ffbdcb0
-
/data/user/0/ir.diamondapps.televpn/no_backup/com.google.InstanceId.propertiesFilesize
63B
MD50faebd7f7fdae53cab4466b2986b63ab
SHA1323e5624895d0e06a959cb78f44ff3a6f6f91113
SHA256d042a83da08affb8d65e79bf308032c7eddf84177d24c55f4ec692451be4d145
SHA512e08340e3c0b3f6329340479976743d4644938a3a88be17309c7122d3b90140d7018d288601de68ae5a2f6b7dc0cf908352924fcaaa8c587e1f0a5ae19ee1186c