Overview

overview

10

Static

static

10

b0a418ce4f...18.apk

android-9-x86

7

b0a418ce4f...18.apk

android-10-x64

7

b0a418ce4f...18.apk

android-11-x64

7

Analysis

  • max time kernel
    33s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    15/06/2024, 23:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b0a418ce4f5439ddcb9c864e5ffd45a4_JaffaCakes118.apk
  • Size 7.8MB
  • Sample240615-3b7ldsshkq
  • SHA256 449a67e03e05e2035b33fd253bee3f8bcf9c54c85e2bfde571e7e5d44ae485bb
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryimpact

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • ir.corona.viruss
    1⤵
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4642

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        5a64801a-a9a3-4f80-a993-4b41b5825ecd.jobs
        • Path /data/user/0/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/5a64801a-a9a3-4f80-a993-4b41b5825ecd.jobs
        • Size 176B
        • SHA256 90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
        • MD5 SHA1 SHA512
        Submit Download

        6439bc12-ef84-4f0b-a0eb-d34cbb45885c.jobs
        • Path /data/user/0/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/6439bc12-ef84-4f0b-a0eb-d34cbb45885c.jobs
        • Size 278B
        • SHA256 715323e8ffbeab4d9a915f6e2fdb259ac1d849b36ff9abae38357eeb17121bf4
        • MD5 SHA1 SHA512
        Submit Download

        9dbe18d4-3738-4891-b8ff-8dc902d66cd9.jobs
        • Path /data/user/0/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/9dbe18d4-3738-4891-b8ff-8dc902d66cd9.jobs
        • Size 179B
        • SHA256 9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
        • MD5 SHA1 SHA512
        Submit Download

        c4472d70-6a55-41e6-8cca-25d17549fd5b.jobs
        • Path /data/user/0/ir.corona.viruss/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/c4472d70-6a55-41e6-8cca-25d17549fd5b.jobs
        • Size 778B
        • SHA256 2328566a33eae8888336832d793f0e19048202a429f3f40a421c25a988a2bf17
        • MD5 SHA1 SHA512
        Submit Download

        cheshdb
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb
        • Size 24KB
        • SHA256 1091580378b83e0ab3222d05659ab9aef1d2c65d766d5e04735b628d7a760ba2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb
        • Size 20KB
        • SHA256 fb15a77abe85663e9fb473ab13cd80e994b95fce5529bba3baf989f1a8d64354
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb
        • Size 20KB
        • SHA256 ebbbc7f6bdf55a7c6a4565b7171196c0b0010cd8ff46f6b82c02578d6f513e25
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb
        • Size 20KB
        • SHA256 d2ffbb0bfb9e418accc36bc5a81ce4784f51194f14fb67312c52f556dec3db6a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb-journal
        • Size 512B
        • SHA256 f2c8dbfc189c162c58b2b27030c51edd7e90a6ef596ad62f612841a88a84e578
        • MD5 SHA1 SHA512
        Submit Download

        cheshdb-journal
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb-journal
        • Size 8KB
        • SHA256 b7716954e9c6367d69211baabf40b9e09cf6b56e51dc643d039f7aa7ff37718f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb-journal
        • Size 8KB
        • SHA256 75ab7a9c930986f06f1763fbb8b0bfe382c368b4420b7a3599a7ba7435dcae3d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb-journal
        • Size 8KB
        • SHA256 872259ac1b1bb704256b63494c73ed16dd22b0c29fff4c861efc293ee7873b56
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb-journal
        • Size 12KB
        • SHA256 1504475b7f99af12167d45fdf57f375677d430475db0ea42139185a4a01cc978
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cheshdb-journal
        • Path /data/user/0/ir.corona.viruss/databases/cheshdb-journal
        • Size 12KB
        • SHA256 8eaa55fb9b53f59dd86c895c90d062d51b808a66dfcfdb209938bc8b943fbac0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager
        • Size 28KB
        • SHA256 914bb884232bbd1e8e41c7725283c1d04b8e9b058b74f35ff3886a1b99433f3c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 20KB
        • SHA256 581eaf06944c922b72662aae37f0e89199f3fd2350321573617aca25f8d0a370
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 20KB
        • SHA256 943f6140b8bf9414b86b1312498ece446f5c68bc51ac0645d8ad42bfc9a00c23
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 512B
        • SHA256 359b2b6d1d494ee0437eba3ed5f7c177d9a28c9b051edf6e110eec515e1eaa15
        • MD5 SHA1 SHA512
        Submit Download

        db_default_job_manager-journal
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 8KB
        • SHA256 d7d64288a1db89272cf22008d3aec177e8c3843486406f71807fef6778586bbc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 8KB
        • SHA256 fb3253f6aaab1f0c96f6672ef46e5da4b86e5774a0865d7f1a5cdefad807e9f3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        db_default_job_manager-journal
        • Path /data/user/0/ir.corona.viruss/databases/db_default_job_manager-journal
        • Size 12KB
        • SHA256 a04c4f6a61360bc873775f2c655f46d773a1ca617b07fff68544037377656284
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 82871abb8cce3ee1a852402bee5c16a60ae3ad1dd301d8f6e188e119ac3a9780
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 988125e8f65af66dea43cf7f8c0af728e23f53d8915f4ebef563a9e59d1ea396
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9d774d27a77c4bf7113f0b6c892a068183a81d1f08c140e8736641d4bf627946
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 712082bc7b2a95ba9c42b37b3ffc01643b0762ff533122f63819b2a635a2c2e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 324e0e9bce6bbbefbc812481658130bc1592381d4da5766c0ff0d442027ea0d2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 280fc51e7fe9d2fa7c3da5c191da4551122dad022fffa32c847ab0c402c25cef
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 20d7e16ffb08283cf2544a2f7104647feafa517c661a1a582e2d817a0b04bed5
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b64a1fba757cc07b939468276fadb78040e3998b94227723977fa3fe32ac9447
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 a02b715bf0fc1fcfd8d6183c13c5cd79b939273fab685669d1308ce13912784b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0b137005061f3505db175357c58a8577b646f0d7b855359b262c86765015b559
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 33abaa4f041e9f962fbae3d4449db1c4fc2dff7b264d51b4c74c5602324fab97
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.corona.viruss/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 235f62f37d274c67d3b5e62411ccc08c1a24ef1e1a16971fcc9785c7c43d51f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.InstanceId.properties
        • Path /data/user/0/ir.corona.viruss/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 ff276f9899a619ef6c553e375fa5562f2c78fedad23902f1b959be4fc472da63
        • MD5 SHA1 SHA512
        Submit Download