Overview

overview

10

Static

static

10

6f97af07bb...18.apk

android-9-x86

7

6f97af07bb...18.apk

android-10-x64

7

6f97af07bb...18.apk

android-11-x64

7

Analysis

  • max time kernel
    139s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    25/07/2024, 12:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    6f97af07bb256b736313e842aad4db36_JaffaCakes118.apk
  • Size 5.2MB
  • Sample240725-prnasssalc
  • SHA256 58f161cdf468811e0d061f12136a1f7981427adf2651351597e995473987f45d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bankercollectiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    discovery
  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

    collectiondiscovery
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • ir.mizansoft.parvareshkaktus
    1⤵
    • Queries information about the current nearby Wi-Fi networks
    • Requests cell location
    • Acquires the wake lock
    • Schedules tasks to execute at a specified time
    PID:4614

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        __pushe_base_lib_db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db
        • Size 24KB
        • SHA256 3b467238b4d06ce3f3051f93e52ad3295d86efb11440ad619b759979bc635546
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 7a0a15c52bec386746377adf8057ed4bd01c93b938c81d15c8e78e327b66325a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 c4068ae674ac31abc31c6e39be7c1d7651571c2f0c7045f00edac7d01ebd70b3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 ff74082f306621e2003366325571bf7a13acc7ad3f26750e6d451f2552928753
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 142971e231d5bf6c956a6e8fe9095b048af9de702b85e4af5747463e1a6045ff
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db-journal
        • Size 24KB
        • SHA256 39cec4022287a4a39d590451b791253f0f9f6130d94ded25bfef7796aae1f72b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __pushe_base_lib_db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/__pushe_base_lib_db-journal
        • Size 512B
        • SHA256 97da3f0d8425072f428f1564efc859f18c6bd7bca478561bc2e533fdbba14bad
        • MD5 SHA1 SHA512
        Submit Download

        evernote_jobs.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 4cd28d7e3fe0bdf5b248d1873747e627c28c2ff441b48db6423d3af61e21ab43
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 061ac4ccc61614dfecb99ac2dfa1585bb3c18456f242dd7c7948af872ac825f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 70dc4fc00e9e97e3ce96357a511cdcf8613bc31388aa2ca26786cb906ef458bb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 d3f91840ac083e18424a937a3989acc7a1098f2992c1253522eeadb89364ebad
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 dc4f8a73f49d2a6b41ff425fd08b85c1eba5280c438a1a1ff9832e91dfa56cbb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 f2db79c7eb0f852712ba03474f57fe623fdaa10e35d5cfb48ebe7186f6b7392d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 2a8f5086834f3da920c161f5e2a66be8a9ebd2f8390dacdd20afce119f1dca97
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 aa6aaa541a63d6b9a16d0e95972b4a930ecf33ad58e39e54e12d69ae6af0abf0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 a9a1ef97950a065711f3eabdda1507d102deba672ad7d88d8c2aff2dbe1520da
        • MD5 SHA1 SHA512
        Submit Download

        evernote_jobs.db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 6b3f04d4d6c7061198847481fba10a805322b58a16a0a9b23ca24aaaf537bfce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 6b82504ec5c9696d49d5521309d42bd3d93780def3233a7588f0df5545574edb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        evernote_jobs.db-journal
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 9cd4bf9126322d71b59b00aeac64c295b2c377cb1df3f8bb04c848b27d23e2dc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        parvareshkaktus.db
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/files/parvareshkaktus.db
        • Size 240KB
        • SHA256 0bc318bf2590ad63a249dea5a9f0390b41aa6b5768a2cc3c49838a9f2b1b28fb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unsent_requests
        • Path /data/user/0/ir.mizansoft.parvareshkaktus/files/unsent_requests
        • Size 58B
        • SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
        • MD5 SHA1 SHA512
        Submit Download