ec21455966ecbe3e5305fda17637c492feffd9007abcd8f3b4e7893027022723

Analysis

max time kernel
132s
max time network
168s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
13/06/2024, 01:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a35a8931da00fbc21ecf01495190986b_JaffaCakes118.apk
Size 3.6MB
Sample240613-bte6basfrj
SHA256 ec21455966ecbe3e5305fda17637c492feffd9007abcd8f3b4e7893027022723
MD5 a35a8931da00fbc21ecf01495190986b
SHA1 6b49ffe192ea622ef3cc574d756f73dae9ea51ca
SHA512 14f599d4f585eb6344a975570a239d88fd1b76ca7ecb68f689d0649778013aa2b73a2562f6dd2a2f5a110187a6388752911df2b769693a199b7394c4ed94b17e
SSDEEP 98304:i3bYI6St5IejNYJG0DW0ToccVoakCREK5:jSjIejN/9SoxoaVE2
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.izzld.browser

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
9	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.izzld.browser

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.izzld.browser

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.izzld.browser

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.izzld.browser

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.izzld.browser

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.izzld.browser

com.izzld.browser
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5112

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

city.db

Path /data/data/com.izzld.browser/city.db
Size 123KB
SHA256 d15cf7a216e89b4e6f29100962124f04aeb57077c78a7051f48060123fb64ce8
MD5 91e0ba7eb84db8c0f3ca743eb6f298e5
SHA1 e8f0a8c144a429d662ab7a32624883b49d31a4e5
SHA512 62d057cab58a2a6fc38d74931860ad0cff19106d1250e92a3934a35d1c553dd293023f9cdb78d8545151f608a9ed72c2e3588c92188c3243d416af8fede5d783
SSDEEP 1536:K3RuDtkPJRDUpG6/CjgXdF2i3kGSTi704j0gf/E/tb81pDzpo/Dajq:1DWPHUxa0ui5STiw4j0oE/tb8jfi/Ojq
MD5 SHA1 SHA512 SSDEEP

Submit Download

city.db

Path /data/data/com.izzld.browser/city.db
Size 3KB
SHA256 c036fe5d172de0db0651f8f045f2e2e580a87da32bc0390120607cbcb7c428b2
MD5 69aa6a3cd7a86f622073d13d0ca98776
SHA1 94b8b831b53fb9d32eed7718dba671eed12c1476
SHA512 6f6ff57282b20d9191dfcfdb0adaa28767c5499e1a51f7a6c06598e56aa0e0476008e81e24e36fb68b79b68ce80f6d31e873cbd494f1b28ebe3aa1da3ca11046
MD5 SHA1 SHA512

Submit Download

city.db-journal

Path /data/data/com.izzld.browser/city.db-journal
Size 2KB
SHA256 689061030337650ddd10a7269a5201a4e392f72fb7720d062e29722af2b241b3
MD5 72a0551c6fc31022f6849fe9a54aa6b0
SHA1 1e625860ff4b038b49df70c4d4f8356ab23cbbfa
SHA512 4ff306fd376afa2b7eb377358b6bf9ff960852d807ae825f6663dfb9987d9dfb8d417fd7d2f3161d0624d060c2912f2ca53ebcd8b1bfbcb7813ebf4f98575ed9
MD5 SHA1 SHA512

Submit Download

bookmarks.db

Path /data/data/com.izzld.browser/databases/bookmarks.db
Size 20KB
SHA256 aa98561a9df5154cb1dcf5a7b04c16754e2798478f03f16361ee3d0c48555c36
MD5 e04304adff7136140e65b41ba34e52dc
SHA1 bd394179385c5b828d86b31c039cac1e00a4bf20
SHA512 d418428b2d8b82a3d80eb0178ad02bea800e22af569f4a54345faa0965bec4a6c228c219ff1efb52c511b1bf0ca1d380d1dbc6760415138bd71da06d4ec4f1ec
SSDEEP 12:TLyKE/OyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbAVOw0EHSAHym5:TLy9/T7EWozOHOvt0GSE04
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/data/com.izzld.browser/databases/bookmarks.db-journal
Size 12KB
SHA256 310934167e66bc3305e239904fc58641fac3b37438da5128ccd2ed3e92ffa1f5
MD5 74414a34cede0826663170777545bb09
SHA1 fdadf96b1bcfb6582656deea1396cf01775d6180
SHA512 7b060ef8f110ced420b05a5bc7199016fcc92962545fb8e634155421ac3ca3877c24fb4ba14292edb771950bd2725028603aba95bc6613122ea828ca0908a878
SSDEEP 12:7+tfIDpqLmROyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbI:7+twDpqLwT7EWozOHOvt0GSI
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/data/com.izzld.browser/databases/bookmarks.db-journal
Size 512B
SHA256 54aba261daee7f1519242a5c15dce4d7b2f92afd92fd6c6570c021238ceed538
MD5 aa269e9e638f07afef3072c4da5651a8
SHA1 ca41684765cd87e416363b5ca6740035d0772a78
SHA512 39d3d0a39d4dd0ae511e84f9042d178b6114680d3ae8c858bd550b303337356d4f8a12343665b2998d42ac1fa7c54966af8a3da8b6b26b5a77274fd00c556426
MD5 SHA1 SHA512

Submit Download

bookmarks.db-journal

Path /data/data/com.izzld.browser/databases/bookmarks.db-journal
Size 8KB
SHA256 bd8912c5e06cedbe6ea85a9a0fbcc70177f908a7639c8806669c61396fb76e15
MD5 193cb94bd6d58a78c3768b87f2f2d9b0
SHA1 dc5ebd0c8eb049eb658525649d9470a162d8a354
SHA512 0d431bb67a75bd24d8e61794373438ad19661e02d50349067e718bf7b5bab261b62784b1054b3789eda5b19fada81fd4245be33f9ca2823174c57cd32a94fce0
SSDEEP 6:7+/l9TGV/mHn1CdkWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK7:7+txGV/mknqLiuWdwRmBEyPb0
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/data/com.izzld.browser/databases/bookmarks.db-journal
Size 8KB
SHA256 38e9953cf1945ec3797a67b4371de1cc18185ed5f920fc7ae8ee395355735f9c
MD5 4afe9832bd67d9cd69bfecba8f476b77
SHA1 d23d5bac4b7a27af02891484ca1d6b80f4b53042
SHA512 b4e9605f7c01eb45a152e92f5364f711e101d88b243756db18ad4b8741bd976751fbe1851bae5df52a7d04c1c7ea2133452486512d0ace7b24830d3aa9d0de38
SSDEEP 6:7+/l9zOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKsDa/rn:7+t5iqLJdTRmBEyPbRqrn
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db

Path /data/data/com.izzld.browser/databases/qapp.db
Size 20KB
SHA256 38c00a0b419eb85e29366e21b36391bcc23277f3b73a816cfdc3bec71916ba49
MD5 3217f39aaa7a767e93259a5271aece12
SHA1 f313d7a56761cd13fabafa10fa00a4d692870b80
SHA512 19b0b3f6e9f917b3062c03c88aba8f65ee3d5f222b2b4e738e91cb59e21c09e1f134efc6c6b2ce5935e96e195cd0bd760f0a87dc7d5da176f88ff51b0a6a01b1
SSDEEP 12:TLyKEiryNTSFby+uF20oXz59T5PbERmBEyPbAVOwDJP:TLy9hsATgn9GSEDJP
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db-journal

Path /data/data/com.izzld.browser/databases/qapp.db-journal
Size 12KB
SHA256 8988fd4c65133bf908d28f37156d76fb56bd1e510b6c2225f14065513505456c
MD5 e238a48c37fe1436e13bd889cc4fb0fa
SHA1 15c5e5a1ef7bf10a0f34689b6e88bccfaf02ef18
SHA512 86338c6ad355bbe4f75d05423807a859b5fdaeb4edf05cc77cae2c4437bdc03a72d7a0515c8d420fb344a1caebbde06d964b53b42c0bb7ce7ecc5713ab4b310f
SSDEEP 12:7+tJifk/vqLmoryNTSFby+uF20oXz59T5PbERmBEyPbd:7+tJGknqLKsATgn9GSd
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db-journal

Path /data/data/com.izzld.browser/databases/qapp.db-journal
Size 512B
SHA256 7de5388816e6b9267ae412902a4aa85eb478e43dd5d9e2d4dfbbb067b6e6757c
MD5 742e43a292a71abc3a6cb24a37908a48
SHA1 52a9b3857f8cab4086e9a678b2171f5e770dabbd
SHA512 8c232f9c77ac5f3f0d19434d9bf9fcce6e74f061b1ef0a69e757bc2343434c0a958523586e24a916a28d54b4c9c9c5a5c1316be2f68394424d9b5df5b8e6f8e4
MD5 SHA1 SHA512

Submit Download

qapp.db-journal

Path /data/data/com.izzld.browser/databases/qapp.db-journal
Size 8KB
SHA256 c0ce00f4fbad31f029f88c6eac10936bab2c88192a33e2c3b33b41fac86ed233
MD5 53563999412978c24a67d796aaabf0ad
SHA1 8e728c8e5b93d8e98515c1a6ae394c51e51a9cc6
SHA512 f7694920e2c43cb21b087cb2a8025d52393497a5c3fa41236784c00b0fbd79d604d2194536bd3a1c1cf579346b78bc5f256a1af8f223d73b6d5130250529a1bb
SSDEEP 6:7+/l9q8Hn1HC+2vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKz:7+tl2vqLiuWdwRmBEyPb8
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db-journal

Path /data/data/com.izzld.browser/databases/qapp.db-journal
Size 8KB
SHA256 ad03814a073fc50da28b704b801241b6c417788b45d3f27a10064cd1b9ef3c02
MD5 f8e9a8f8a35bd00e7635cdf0c2c3deac
SHA1 45efa2318c957baf774d20db01b2335af0168251
SHA512 8105eb826a53cc8ab7c155d04727e68b2d87c9f50ff01ac5db9b29c2cc45291535bd216769296db29043ec11aca1df10ef9e05ca11626a2f4b219983c1b444cf
SSDEEP 6:7+/l9ItgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKAOM/wn:7+t9qLJdTRmBEyPbHLw
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db

Path /data/data/com.izzld.browser/databases/weave.db
Size 20KB
SHA256 3a95a8bb724881a523a2e2ac15f15593ccb8088904c96e655a6915bed5503023
MD5 13fa423a11adcbb4f1e83d4ba9a4dfc6
SHA1 45760b64924c0bee300fb15dd29520546453adcb
SHA512 883521a20ddfdf308e7a09b9e9fc6a0c751d53748d17cfe67e7d5ea3b7f1d45fea6dd1085ec505d0f903674ea07d7107258d409534c723778ec69cd09b8a8be2
SSDEEP 12:TLmnyNTSFby+0qznu7AurAuC59CB5PbcaGRmBEyPbAVOwG:TLfs0qK7L30CMadGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/data/com.izzld.browser/databases/weave.db-journal
Size 512B
SHA256 a5d368300b01dd635a044344c404aa820c4bdb3a5f5dbc2a4a4d3b0a780155bf
MD5 a17227e337977a41ca408ceba3cff840
SHA1 8f28c5a7fddf56838109b6efca0aec376769d790
SHA512 8dcc8edab97394e203287c6a4abd1417646d223dbaf0b8cad1e34703ca78379b1a4b710fbf2ff9a18c2e1acfee1e2e55246ae56c603eeb0f05fa98e9fad705db
MD5 SHA1 SHA512

Submit Download

weave.db-journal

Path /data/data/com.izzld.browser/databases/weave.db-journal
Size 8KB
SHA256 19e80ff297ee6ab655e9db73d578aea2ecc911bbce6a6b44572295f0772d28a0
MD5 1d5026e427fdae5d785ece9a14b935d4
SHA1 e095119b9ab9925762a51452ecc86b1d1e1130b3
SHA512 a2102a1dba109979e6c113fa30b8282983ad1233f0f6fca01cf3103fc687ea1edc064711b4d1d54a841bd81f6e643535acf26740db5e10091a3cda6d5e8c0b1f
SSDEEP 6:7+/l917/lSFn1/llng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKu7:7+trty/nqLiuWdwRmBEyPbf7
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/data/com.izzld.browser/databases/weave.db-journal
Size 8KB
SHA256 6f69ec56ccfde9f1979c2a2c4d69d6c87c0ebc2eac27120a0e87048533e99835
MD5 8de23ced203b32eaa5cb585aa854e463
SHA1 8fc7f97b6a60ac544bfba0885af37c2fdee15aa1
SHA512 5b45030cb7d7dec72beaf0a6ddb19b2b0523a4065c6b4b894ac2dc60ffadf1f167349389937f60282eb009a894a16b9cec0eab85aa612cbf9298e7f96e6bd632
SSDEEP 6:7+/l9NPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKQKK/e:7+t3qLJdTRmBEyPbyae
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1718242032492.env

Path /data/data/com.izzld.browser/files/.um/um_cache_1718242032492.env
Size 547B
SHA256 18ce6fc7072d71ea389e6fdfd4d2f0a87aef8c56719ced22aa810a4bcf6ba0a0
MD5 053701fef10cdff98383e11350ebca1c
SHA1 cfc8a942d5033a50e935a8a929e80f2b7ad762c8
SHA512 a759c79e3bc9e593795a50fae220baec058589e3faf565ad7d97e1d6af4b471752e5005c800a38ebe4ef9c17647b32566efb8c230ab7c169f30c7cdc91a86e90
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.izzld.browser/files/umeng_it.cache
Size 245B
SHA256 bdfa2fb455248e5cef32f88e884b96a31eded180d92de3ef9493a41595a37b75
MD5 5718fc4310254619fb4a1f6fc36b2456
SHA1 8ae8221cd1695e5ac70832f23f1703ea5ef113ea
SHA512 34ae43cb1bbdcd9218be9bfb7a7df8f72cffebf988c0958df866c2cc9bb958b4be0afc88920bc89999e5875025fd78f63b8fbba18fc6d3daab5b8abe38882d55
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads