Overview

overview

10

Static

static

10

b0a418ce4f...18.apk

android-9-x86

7

b0a418ce4f...18.apk

android-10-x64

7

b0a418ce4f...18.apk

android-11-x64

7

Analysis

  • max time kernel
    175s
  • max time network
    183s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    15/06/2024, 23:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b0a418ce4f5439ddcb9c864e5ffd45a4_JaffaCakes118.apk
  • Size 7.8MB
  • Sample240615-3b7ldsshkq
  • SHA256 449a67e03e05e2035b33fd253bee3f8bcf9c54c85e2bfde571e7e5d44ae485bb
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryimpactpersistence

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • ir.corona.viruss
    1⤵
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4261

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1152dc98-bdb8-4166-8217-14a05eb1cb23.jobs
        • Path /data/data/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/1152dc98-bdb8-4166-8217-14a05eb1cb23.jobs
        • Size 179B
        • SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
        • MD5 SHA1 SHA512
        Submit Download

        96d6eff3-5670-4ded-bacf-31bbe6422a1e.jobs
        • Path /data/data/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/96d6eff3-5670-4ded-bacf-31bbe6422a1e.jobs
        • Size 176B
        • SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
        • MD5 SHA1 SHA512
        Submit Download

        cdbbbf7b-2933-4cf5-bc1a-9ace6cfa37b4.jobs
        • Path /data/data/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/cdbbbf7b-2933-4cf5-bc1a-9ace6cfa37b4.jobs
        • Size 278B
        • SHA256 ba3b64dcebd7f3a6cf7d606e37c51ae7d95388d26acc30b587f0dedc04d584ea
        • MD5 SHA1 SHA512
        Submit Download

        daf411cf-b8b3-4493-adec-4b7b96f50b31.jobs
        • Path /data/data/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/daf411cf-b8b3-4493-adec-4b7b96f50b31.jobs
        • Size 777B
        • SHA256 768dc14603a18057430817724d7f7899f87e99270d5bb412d80255df434beda1
        • MD5 SHA1 SHA512
        Submit Download

        cheshdb
        • Path /data/data/ir.corona.viruss/databases/cheshdb
        • Size 24KB
        • SHA256 46cc2cd48a3621ce276d0927dfaa0e367261e740d6c248c48fa48b25be769fd5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.corona.viruss/databases/cheshdb
        • Size 20KB
        • SHA256 17c2d82d1544255b2218c92efe4ae9e47fa7fcb69dbcb19319742fbac7654038
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.corona.viruss/databases/cheshdb
        • Size 20KB
        • SHA256 df3d779210a4d72d885d64b21efd42673a5e48006b11424ebcb61a2444697b37
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/data/ir.corona.viruss/databases/cheshdb
        • Size 20KB
        • SHA256 53978dfed0f2ee8478f17d52045ec19a2c3711361d0de3dc67bc57471374a5af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/data/ir.corona.viruss/databases/cheshdb-journal
        • Size 512B
        • SHA256 dbcfc5a1fd801d8fb53487b91232dbfd02945af191de6918ed4d9877e82e13c1
        • MD5 SHA1 SHA512
        Submit Download

        cheshdb-wal
        • Path /data/data/ir.corona.viruss/databases/cheshdb-wal
        • Size 40KB
        • SHA256 3c6f68bee552f91cf0cf1d050a1da704aa0da84102383aeea9e16ef66fbfe880
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-wal
        • Path /data/data/ir.corona.viruss/databases/cheshdb-wal
        • Size 8KB
        • SHA256 ca27584238f54e52ed2973ea07e63db206941dd06779112113993ad8a3aa4343
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-wal
        • Path /data/data/ir.corona.viruss/databases/cheshdb-wal
        • Size 8KB
        • SHA256 ff6d73af9de055e43b6d97051ca901b1fae3e7aba445360742edf8a774983925
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-wal
        • Path /data/data/ir.corona.viruss/databases/cheshdb-wal
        • Size 8KB
        • SHA256 64b56e3d03ab808513078c6c3012f056a2de7bf1f9e4a7010fcadcd491a9306e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager
        • Path /data/data/ir.corona.viruss/databases/db_default_job_manager
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        db_default_job_manager-journal
        • Path /data/data/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 512B
        • SHA256 e219690b45a426c94e643b9dda662d6a665b2cd469df94a2ad38e23fd4cf0c98
        • MD5 SHA1 SHA512
        Submit Download

        db_default_job_manager-shm
        • Path /data/data/ir.corona.viruss/databases/db_default_job_manager-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-wal
        • Path /data/data/ir.corona.viruss/databases/db_default_job_manager-wal
        • Size 156KB
        • SHA256 a36f47af71c14e4e0970de5de41bf56bb84458e99c91245ea1610174a167822a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 30ed15432c628cb6e987be262a6093b875f47d73d05cd72d04dddf253e2f104a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 93cc3a517cb70a4eeee6293ec2c29277219d01c2e48edc64c7bebd732c75ca47
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 61880cf630c098b6153f1e4aff45435c9b96896ab2cceca4cf9e659bf9df5186
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 948857509670cefe069fa77951ae8d08c66c6b87d6ee01fdb67732fc01fef2a9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 50c864e0b494014e9a1d78a253ca9daa126f2762dd8d78991540ef45207db793
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b134f29f4f0484e2b5b738b3a1e30704c6376259ae9d2bf2f330ddfbb5101445
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 dfe71669547a184fcee88ea5d6bc2ebfe84722135cd99925c4e94ed8f8ec32cf
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 ca43f23ce6ed2d89d00b264f7d423a195e32d4a3942a96ea9a9c54986d56ab6c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 04c776fb4f5bed3e1fec6ee3e0eae85b54f583aa2698938c578da6fa39e9bc4e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 1ac9d8ff7a768731eb094618ad45b991b5e6fbea3b4553c926a904aca354c4e4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 0b03c0cffcf39fb401abf8f30024b6653b2275966f9e07d7663d3913ca4ee453
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 a8503453ad7019c1a3bb5758b2871a87ea9db1af2f4b7e6f1100990f65e8e044
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/ir.corona.viruss/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 b353c69bdde01cbc817b6ecadbd54c88d9c43a2db600967e9d533cfb1a5b574d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/ir.corona.viruss/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 5d341576178ac64ba09c11bbe525e6938a99c1e1a0927c116786e2a9e1689455
        • MD5 SHA1 SHA512
        Submit Download