Analysis
-
max time kernel
61s -
max time network
181s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
11-07-2024 23:43
Behavioral task
behavioral1
Sample
3b2f79fe764223ac02b59d3792034762_JaffaCakes118.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
3b2f79fe764223ac02b59d3792034762_JaffaCakes118.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
3b2f79fe764223ac02b59d3792034762_JaffaCakes118.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
3b2f79fe764223ac02b59d3792034762_JaffaCakes118.apk
-
Size
7.2MB
-
MD5
3b2f79fe764223ac02b59d3792034762
-
SHA1
ee90c81affe9ef440507c4186b752827e84ce9d2
-
SHA256
62bfb163d55007771500547ffb6d7493896d5c6b05032ac569d3b1cd0e2cf3c1
-
SHA512
8a9568b3517a7fbd15df0e3dbc3016eab705818894299471b666fdc208cb7c2ac09c01f2dac1173c29eb7ce75448e5c9925df875f57b9c0b6b333fb67686ddbc
-
SSDEEP
196608:xgzgH+6+za7U3pAeimbmpjD+/enzdhiU1rrsOMgXjl:ESqa7U3pAei6mNDWenzdhtrsXu
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
ir.teliyam.keremdescription ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses ir.teliyam.kerem -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
ir.teliyam.keremdescription ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults ir.teliyam.kerem -
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
Processes:
ir.teliyam.keremdescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.teliyam.kerem Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.teliyam.kerem -
Acquires the wake lock 1 IoCs
Processes:
ir.teliyam.keremdescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.teliyam.kerem -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
ir.teliyam.keremdescription ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.teliyam.kerem -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
ir.teliyam.keremdescription ioc Process Framework service call android.app.IActivityManager.registerReceiver ir.teliyam.kerem -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
ir.teliyam.keremdescription ioc Process Framework service call android.app.job.IJobScheduler.schedule ir.teliyam.kerem -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
ir.teliyam.keremdescription ioc Process Framework API call javax.crypto.Cipher.doFinal ir.teliyam.kerem -
Checks memory information 2 TTPs 1 IoCs
Processes:
ir.teliyam.keremdescription ioc Process File opened for read /proc/meminfo ir.teliyam.kerem
Processes
-
ir.teliyam.kerem1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4224
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ir.teliyam.kerem/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/558a8476-e585-4d8f-8f12-e40c04eadbc9.jobs
Filesize179B
MD5ac58f99a1b179d71e8621412ad31c6a1
SHA1b51fdad95876f5615735c2ab411031ff67d5e946
SHA2569537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb
SHA512faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b
-
/data/data/ir.teliyam.kerem/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/9549e121-32ea-4ab7-8425-6281fa5c2c12.jobs
Filesize176B
MD5f56f328eea1d5c96a1b96dbbf59488df
SHA1440c784cacff61932e2f61580b7cfdc3a4943c95
SHA25690949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918
SHA51236e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb
-
/data/data/ir.teliyam.kerem/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/bb2c21f1-a7be-4f99-8e8f-51867344efb1.jobs
Filesize278B
MD57505f07b58a4ac624d694a32ca42f25e
SHA17bf440e25bf5a54cf0b6098157f79a9921253c4e
SHA256d055c527fd41552f95f1427c0a3c59837eebadabad61ef076ecf62eb54dd8848
SHA5123139498276a65d0e6d5cd454cf4b2d9bf3f3f8748ffd83720506a31e4f8ff87908539c43d95c1d0749bce565d27183d28e7b57d1b101db0b7a03d1544dfaf423
-
Filesize
9KB
MD5e8e0527a01aefdb89afd2c508f131da1
SHA1f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
512B
MD5d6812731efd8edc069d02ab541f1272c
SHA14da89537fbad0e551b17f292b7c00d54637eef6d
SHA256f34e8bd59746400db8a243633dea28a71e2b08faa7f75c2aa0b8cd6903bbdd4a
SHA5129ac03b011f895590ad90c7eef4ceadf4e24c80b2d1a9b46d14676bd3fa9b6b0f022d228bebe395a78078cf35cf276cb45d12d9b3bf861d5b877beeeee762fa59
-
Filesize
148KB
MD5771148d94c2e5fcdd2caf0dd5e77d6c3
SHA1baceb816ca3d7083695ecbb5028fadebbe35db4a
SHA256a8d5fb0d64f5003f872580bf4478125fa71ab9f501d2ab7217d27905a6696800
SHA512347c216c4d3efe02b2df95e915fa04dbca2e443fe79532fc311de8979644cd30f553c5fed03ee6c0a83a5533920fd3faf38aa7f805d8baf819048050824225f2
-
Filesize
20KB
MD55ed03017366dc798026a1487c365ebb5
SHA15bd50c2c4d583eeaf2e4faf6283b95877685bf48
SHA2560f67a8f4e4c26ac897ea132d66815ce573746c3ba2f4ece16622ad71b4bfcaee
SHA512d385ecef441c04ab49659d3ef30533c416399eda462cb90c63cf4929e9f9d63b3d6c9aa2a4ef9c615e92679698c73e7649c51d206ef049751ac89721255e71b0
-
Filesize
20KB
MD582abba93ae0f0eb95ddcd64c674cb588
SHA1f20b910ca407b8184db9e47ed9cddada23a1effc
SHA256034f1978116c409418e2b537c5d80448f2f3e6f43f4f88905af6a0a089a85fb6
SHA512c2125621de7f3a2edb33a521516a19361d17bea6277292ec83db602b70a25f149d3ed8bff5db9c90f011abd4101601ba26d63fdaa68d1799689c6adad551a761
-
Filesize
20KB
MD55137560093b29ce19ea3372a2edf6965
SHA12181664d94c99b776e0d809a797b05c3a03ce04a
SHA25691c615cdc2ccf7199294a4a4d944dca43a4e44185aa3b5ceee551f43c9fb4c70
SHA5129505e3d8c2a25cdc611085e718724ef1478a1e48669fb3506dfafbd6482a14e4939d89fdfdc80e86ea13a03722b2fc7f6e1499c54eb629293cae9920c8994a2f
-
Filesize
24KB
MD51f347cea6a53594be878e35079bdabc4
SHA1ae24631f83d3c875dd678040baafb5e64fc6ba6e
SHA25646cc2cd48a3621ce276d0927dfaa0e367261e740d6c248c48fa48b25be769fd5
SHA5126f09f140cda839271dcc15857faa5ec7fed65afabd0ed53164744e0b15c145b4fd0ae3f6ef0ad01cdf4eb612510f7f150ea72781740a9c6d67ed1075e5e026e9
-
Filesize
512B
MD5971f4b28f1af9185871d41e0316edd64
SHA1d1c06b2540c8943c141fa2e72d45fec3bfa7d430
SHA256ee3392ceff0c35c80d3606f843e33feabd5bc4e1efb7d19c2eea7a0effdfea6b
SHA5121735c906ad6327ba342e484942e190b8624013c180185053d538fd5320843abaf179c4d0943688d0581625b6e8128f6691fd50362e8964a9c7c12f8a0105d509
-
Filesize
40KB
MD583c3fa17f751e552b782f338ee3600cc
SHA1fba3199f3ef93f0037f8e6b578422e4df1a885b8
SHA256eec9a51ec8fe64adca21ca9ec489a9780c19602552aaf84eb496102478bcfd1b
SHA5122114abfe07af9045bbc40e2a4075636148d2d2becbe0b7fbd1d90a9ffbd39da4e03b5bcbe0b33df010c34710ff4718e011147a2cfd817f600a906b0b0f1bb2d0
-
Filesize
8KB
MD5a55c9b3d03981194695c3d8bf295541d
SHA17c1f606b574fee963462252cbf53412e8e27f40a
SHA2563c51c1664e68bd65798021fca8435930f4435b73bb3779e179ab7e665add6104
SHA51288999d616ae717dce4aa112031d86ebe3aa94df1417df074159ef175d3ea604a10f601f52e9bd181d072bd44fad0fbe0ceb18abd43d6760a1fc66730bce5b551
-
Filesize
8KB
MD52e7faaaff81abdeb7529b45d361ba1e0
SHA1452e9e854090c76651ac6be391f9c8749dec2823
SHA256a48e1d195ce83a1b63a86e1ccf1af012573f0c1f10b9b4ff58b3e5c20ea5bff1
SHA5127715de4da3e900cebcb86f41af396953b50bab1b9df6d894657c564a3e3f00bfe88f74df58cd11c29d1f2d003bd91b0507f5609365bd871d367473b0a2467cf0
-
Filesize
8KB
MD528d60f548d5058c0a9e9d6b30c8851f4
SHA1b8ec67c15193ab046fd625f6d5a15104a11d2885
SHA2560306579de2604d40b2df706d4f320f2239c8e310a8b00e10496cfb51db9d3ebb
SHA5127de7b526b570e2b1ae32e526155236658f2aca0c4b7ba4d0ba043b6c3e8792d19c1d6261995fcf9f24c411c8896fed6447a61edfab72dc011e8eb4410f8b49ea
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5053a3033506c89e014ba77453a11857c
SHA1709ff650cd341a771847eea32d86c03a851eb4ab
SHA256a147b2fd34a38080c91e3f5631a19850f8e22c7695d75954cd5d269f7918e90e
SHA512e0f3c97e73e156e8fd93c8c28aecc0d68042d57bcb7ce1f50f02dd15bf3c0680415352aa9278bce09a874e6502fe3fe2e2dd2d4dff78d82cc205d4a29fb85161
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
136KB
MD5bced8e046c55ceb8552c610040b0d21b
SHA1cefc4f0cdcedbc4bb532cd50b208ec70735cd9cb
SHA256bf8ad4153bcf8456253b894919a4fd150bcb57eb2c15f9ef5fdefe8f6be3d05b
SHA5122de5f99c7aaab53a99889bb09bfcf1957e70be9b6d3d6c737655589c08305445998d8c6cd659b7c2f2bc0ad1d69c4c977ab12f9800f9cedeb1ba33809c195555
-
Filesize
512B
MD54d01f6219574397949dcc3a98fcc579f
SHA1e0ec2d240be54eb7604a0907a4342c775b3a60d6
SHA25632af7f9dda9d4cef578fd24d9d2eadd9cccf64158c3725749357e0f154e7621f
SHA512d0c47a47fdd9bc61e97c04f8efaee6d43873730f76467049e0d62e8480ff9a69942995ea5f7021a77821f2c688c1451962d9e30ef989ed6ab1d9b55860cbe3b8
-
Filesize
197KB
MD5cc94a7d70f99ca2aac255f6398ef62e6
SHA1776ca3b74f6b8b7be6b57ba8be2180d9f516e7a9
SHA256e5df7abf5cefed84f9a3d6a65fc3b9772c4ae87feb5850e10ed76c235837036c
SHA512bd1c3d16516bf322273fc3589ffaf5bdf5bda33870a516f656766cb75014b279ba8e3400b867ed1e43cced11b56b12353b22dc1dc5d68f9e3d52fd2f3f8f852e
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5577c40c882e58a8e6faef76537dcb20e
SHA1361c98f0843102f7b8e70bcf2d65e113a18ac360
SHA2567d2477a7480064bedb1bc7d52112613aff14df8aba9a26c59f8f223ebd11b586
SHA51297c931b1ee27df1139e868bcdc37a68a038813fff31ecb5a54574117ab98cde94b47509b5a6a45c1f4be6ad78289671861d711e529a6ab18d2939c3682922349
-
Filesize
16KB
MD5686acdecc73a9a26171a84e3d25fb79d
SHA1b8434a59af7558b707ddd8e13580d75da3fa1c80
SHA256c585ba59fda5c87ffc1f08b36c5ec50fc9166eaa356ec6cb0f88771568fee3eb
SHA512b046fb245fa387c1a7d8b3263157bd10429ddd683439a0e3ef18f5db7f557a96b76730294a2be8d0cfe5a51ca834d0d9c5615a92d59e1122db4dc3ff6f9a98e8
-
Filesize
16KB
MD527a65690ea1503a0d6fb5152c437074b
SHA1c0868b48fb90fdfc67bd1ec5bc39cd734f58221c
SHA2566c4bc03a43cce90881a496b16a6731a15fab87a707cb3d22e42830eb10222bdd
SHA51235ef07f12278dda1eb4ae52c8306533607438750921e75979d488848df562021a059aa4d74382e0a79335a2875de122e124de053ce1369b1dc77ea4dcebb929e
-
Filesize
16KB
MD581260c7979bebe07299afab8a3e9bd69
SHA1567f992474d0208076d69329482918da3aae110a
SHA256dfc8974dd44198c4959f9872f5ba1983afd7e61a1fadc12435750c08408505c7
SHA512f4fafb71fef9225381fedd9653ffc858e8b8bd934425d6d9f31052c35976112e51b39441a4a117be183b6ee4e93045748c3adf1f960b713db9a7ea439d93fd77
-
Filesize
16KB
MD5ae40eed41112b3a4aeebcd6aade5f5f2
SHA17eb0be0aeacc160ed4e8ab173d9b42b204be6de7
SHA256ef05bab1a95992ea26046167012f1d67767d18e08f60e416f659027fa0b41855
SHA5129cc6d59cb015beef6527c185ae271a12e487fa055761c525d8ee946d555fe56a631662efb73270f44d65dd02ed95012849a8572297f5c5f7ca040dd362427d2d
-
Filesize
512B
MD5dfac29d95878b84731f67bb312536ecc
SHA160310ce17ece1093df0916c256ef9bff7b95fd9a
SHA2569855f46f4f92cecac63f3a6cd2854ba00f9bf24ed4c3faccccd14e61b671c0a8
SHA5127d69c1da962b3efbc21404d40e5111b9b158962921607272fdce966c49342d53a0994e267c8e92467c73e90892e250230416af597ede9e2c7ad1e5f79152887c
-
Filesize
36KB
MD56e9b09b547d18e027a5cd8e0d4254a8a
SHA1a3d4d3a8a4ad6697e1af2a48fc440fadc60a252b
SHA256671db6f0f58663b2e2d3b899cbd9d50070d4400077ee0e640b220a205c8383ef
SHA512b0a669b36f77eb399b03da829243b9fbb0b6b18da0e4b140cb25aabf44eb96749cfb4c547583515d68732abe7ecff6be48ff37ada572edf770e90297509901bf
-
Filesize
4KB
MD5c619e83195282e6d3d109dc884b73719
SHA1d9490570f6d769d1c61d7f20c35fdfb654d9ee48
SHA256c48d5dd7bc49a4442928cd9806c8fb15440d767d567f145123ba3481c6c48cea
SHA5123a35f67b52a86dd8a31cd8d31beea6703b7fa4006410ec153297138a5725c0b168a05a97cb73bd9cf6f62c52c4ee8aa39b996728e5abd3d78fb52907bb676331
-
Filesize
4KB
MD5c73900b094eac3a81d5e8eea5d6cb571
SHA1eed4b4d9492f2e4d2deb96be220edfd754955f79
SHA256b33fdb8e647cf78be9dfeef3722b5607e8d78671dc50160360b175ad94e66012
SHA512add4224cd0cc6e9228fcb0648bbf8955fbb3145419b4fc8d0dd012a2544fbc4531d4b0b038af826ab6bf54724d18552669d1f4ac508269df3d9e66603894a384
-
Filesize
4KB
MD525f1d46d2c844dece97d9b69bad0e42e
SHA1d1c6b1b1390954a8b51067780458124f67a06882
SHA25682a03398ad828aa7c198c5acfafb5f2473e91e229e71f810bbde36ad61becf6f
SHA51288174cf3a7643143f3492b81b66e05678df057fcd387a333a287694093bd214eb0b44f099a05d3b80cd615c81a08aca88ec660c0182a27f73d086c980be5c290
-
Filesize
4KB
MD5497b7b1374543a6239c39a8a911e6934
SHA19ee7ba335ab2f069e7af1b73d65cf4d53bc44b4a
SHA2561daa9c0da0fbcb605290c2987f7f9e71bb9ae701ea612d7c6c61ca54fdafa0bf
SHA51230c2f2e745bf29200b2821d926fecb96d66c3ea0a0be27cca5d1da675fe39a424eb1c5a4d7b335309e99a33dc81452f134c0928bd56be548645cbe973b4e9a34
-
Filesize
4KB
MD55fe88ccca4819899bd09721123c81815
SHA1459b01e24eeca49f2e69325d8645a0df994881af
SHA2564bf590894aa4eed7949c048f3f3846106f6d3c8e1c9156988bdb218dc9eb808c
SHA512d5497b5f73674683720676e0361baf3256e9148b2546cbbd9cccc6dc02152c23f227a673653a037eddf2846b3f410bc4a68982f24bb2f142a70d6d73bbfdc8af
-
Filesize
11.0MB
MD5c89f9c9aa82da7efb89ea5bb6a924df1
SHA1b5b3bea704b826954640536896aa012dab3dcaae
SHA25685ab6af6a561dc1450240cb9cc85e81cfc722e54869ce7aed2ee9b9a255ec8ab
SHA51233016709c276fa85f09e8609a569e5d3a9da96de1d86fe1fc3ef29764f8324ac36c6a5ab74548831799b83a40477097b12d693549b7e32eff04301ef2fd6e01b
-
Filesize
1024B
MD5e8394f4aad6ba804336d4dc1273b931a
SHA162d13d65ce6d72e05e7b71ab680106c9dc19ac6e
SHA2561fb4e2d455b31069032fa51f56c68ba41850b4cc7002b22e01a906c65c86a1fe
SHA51251e93d0ed188855fec15e708abb5f70c8231b1361f2628367c9016984f7baeecb4cfeb95fbabfbd1f6fdaa1eb3501df477639278d935f3d33a12ac0691f18db6
-
Filesize
1KB
MD5534949e2cb57378038f6ca8abbb09736
SHA17639be45bf9ff537fd58c0e018c23a97ed7f6eb2
SHA2563aeea45c62b4bce9c13571a8e1312ac8c51b66be791588606ae1aa93dc317011
SHA51207b6dd0c221927aaf1bac62ed34485d2ff1fd31d85fb491668169d412af602661ec0ce9f56258a676180638e2343912e45e9481c2ed7f24e126a33cbaaba27f6
-
Filesize
2KB
MD573e335c14ef0a86253e354b384861e83
SHA1f5c5777c8af42117d5161d5adfe2c932a8bd2832
SHA256d7e15de61959898dcafb8f68db21bd955a76b9a3f8e1c39c1a535ad21e828def
SHA51227afdfdbc9a9d0b0b6abb0d53844e0336d6f8896d2b8e1837a8e11e2beb109c0fd3d363f9316a41a3b1f8e7547e67974fbc80bd6ef8ee394679ba67a0722bb33