ec21455966ecbe3e5305fda17637c492feffd9007abcd8f3b4e7893027022723

Analysis

max time kernel
134s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
13/06/2024, 01:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a35a8931da00fbc21ecf01495190986b_JaffaCakes118.apk
Size 3.6MB
Sample240613-bte6basfrj
SHA256 ec21455966ecbe3e5305fda17637c492feffd9007abcd8f3b4e7893027022723
MD5 a35a8931da00fbc21ecf01495190986b
SHA1 6b49ffe192ea622ef3cc574d756f73dae9ea51ca
SHA512 14f599d4f585eb6344a975570a239d88fd1b76ca7ecb68f689d0649778013aa2b73a2562f6dd2a2f5a110187a6388752911df2b769693a199b7394c4ed94b17e
SSDEEP 98304:i3bYI6St5IejNYJG0DW0ToccVoakCREK5:jSjIejN/9SoxoaVE2
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.izzld.browser

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
17	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.izzld.browser

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.izzld.browser

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.izzld.browser

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.izzld.browser

com.izzld.browser
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4466

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

city.db

Path /data/data/com.izzld.browser/city.db
Size 123KB
SHA256 d15cf7a216e89b4e6f29100962124f04aeb57077c78a7051f48060123fb64ce8
MD5 91e0ba7eb84db8c0f3ca743eb6f298e5
SHA1 e8f0a8c144a429d662ab7a32624883b49d31a4e5
SHA512 62d057cab58a2a6fc38d74931860ad0cff19106d1250e92a3934a35d1c553dd293023f9cdb78d8545151f608a9ed72c2e3588c92188c3243d416af8fede5d783
SSDEEP 1536:K3RuDtkPJRDUpG6/CjgXdF2i3kGSTi704j0gf/E/tb81pDzpo/Dajq:1DWPHUxa0ui5STiw4j0oE/tb8jfi/Ojq
MD5 SHA1 SHA512 SSDEEP

Submit Download

city.db

Path /data/data/com.izzld.browser/city.db
Size 3KB
SHA256 9276c007eda5be0ad3c858e7c3b5f00f74bcc8a94e8e10740899a4edf26b38a7
MD5 5547ce8c1b383201136d04fbed23a4a2
SHA1 5d0c88c2f63d03d9bbb6895986fe600083c4bdb5
SHA512 26df8046da16e7605c51feed09aa83278a0748c3c1e3d31c57d58fb602d3e9a0e4af44c516c8d7d138becdf0d08cc9f9c4bdcfa2f46f7d23407d5c485b291eb4
MD5 SHA1 SHA512

Submit Download

city.db-journal

Path /data/data/com.izzld.browser/city.db-journal
Size 2KB
SHA256 cfcd1c9efdab16d672a3d11d5ba184ab10cdf9df562750ea6063ffe2aa00eec4
MD5 23ac1a41b417c941516c0e6761a2a10b
SHA1 34b056c7980f4a5daf8c669aeb78825a9b817aa4
SHA512 4620a04f1f0f3e2b68524b8139d2e97bf3397455694ead5996b77030a7892219906aa8c68a849f93afac48295ee447758e9f7c7a4a9f0eeb45ecbfac5600a8e9
MD5 SHA1 SHA512

Submit Download

bookmarks.db

Path /data/user/0/com.izzld.browser/databases/bookmarks.db
Size 20KB
SHA256 c44ce8ef94c67c193dc3829c9bac80167b2248411da629059d0e101106b6399a
MD5 eaa03fe27020fe71046ed9e8d16ed013
SHA1 62769a5d0c6f048406df9e68f83d0f5df627f53c
SHA512 1bb60144b996f30a86ad39cf6b45b99b8a43adf4a98004d8f123c92a286783f569d5d71caf6699628548089e8a96ad72ed818c5310329f574f6795d8d82cb113
SSDEEP 12:TLyKP4OyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbAVOw0EHSAHy55:TLy24T7EWozOHOvt0GSE0T
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.izzld.browser/databases/bookmarks.db-journal
Size 12KB
SHA256 be8b91bcc7bd4d0dbf8dcd30fc0d0053808d5bf464215dc271edb2d98ef8a7c8
MD5 36907d2225c51b06170dd1f11f5bf6cb
SHA1 66959cb82f75c1388d5dd42d0fa1b3ba65a11d9b
SHA512 87d46e245930545f5fe35603e63282ddd311c8af918a8e5222e2baddd61bbacc860ef3b7fcd0b0354c4e7d2c94441ba2db5bdad04bbcb87d985360112cabf283
SSDEEP 12:7+tJqvFfqLma4OyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbDn:7+tOxqLX4T7EWozOHOvt0GSj
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.izzld.browser/databases/bookmarks.db-journal
Size 512B
SHA256 213ce35890682bbc6eb2665d077c00b5692c0b231214eb1fbfefcde792b7f9d2
MD5 d01ff6395765ac57704b3d1c183592a4
SHA1 da114a7db308401533ae5047339f3b3fd4aa0195
SHA512 e8e7847728ba338a1ab3571b723d04af13d3d315ce048c53dd764d570f3246ad7e1a429e7599f24926c1613cccf9487525f1f2ae5bd1860b60a20184133fbdfa
MD5 SHA1 SHA512

Submit Download

bookmarks.db-journal

Path /data/user/0/com.izzld.browser/databases/bookmarks.db-journal
Size 8KB
SHA256 4c0aab102138d9d0cfe79a9d0bfb5d4a1ea6817ac0b75a570552f1a11eb3d119
MD5 43456118a266533875d296b1718d38e5
SHA1 2db96566d6b400c709bc62474e25594fc9d6ae3e
SHA512 cb116f852522720111f17329b804600384910b9feced6637c5e2518f3077f602847174f4cb40d5546f09978727d961005cf84446822dc6f3116b7fe63792ed26
SSDEEP 6:7+/l9yFn1Xlpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKO3n:7+t8pqLiuWdYRmBEyPbb3
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.izzld.browser/databases/bookmarks.db-journal
Size 8KB
SHA256 3e6255b791b002b195d53bc6c6ad7dfba3fb5eeb8fc53022b6a3b0d96d251e7f
MD5 74170d3c5b91400adcce15ec0c16f250
SHA1 05362212923d3bcf65d8b22d77b7915b6f7434c8
SHA512 9e76bd73c12e80d1bd716738bf0cd53c083d038497a9ac85c46724a339a1050b9b0478e6e2ad45f2bcd61cca7dd933bb6adb99b974edc0a31deef6011309fb8f
SSDEEP 6:7+/l9z7Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKoZea/kn:7+tRzqLJdeWRmBEyPbneqkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db

Path /data/user/0/com.izzld.browser/databases/qapp.db
Size 20KB
SHA256 cc88e2dc779ae3d31b8608fdd83016493a695e4faaf780798f7873bca5427928
MD5 85f75e150de3cc837c46744c0302f3d9
SHA1 ad147f7112863abad7c1439e1a4c02945a552c5a
SHA512 4166da73dd1d6c3859e4c7ca7f016dcb29b779898b10c3af68dcf8f3b2c471feacba4218de65ce712b2a1bbc42e4aa6be208733543857758c70f835f4acaebab
SSDEEP 12:TLyKPDryNTSFby+uF20oXz59T5PbERmBEyPbAVOwDJP:TLy2ysATgn9GSEDJP
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db-journal

Path /data/user/0/com.izzld.browser/databases/qapp.db-journal
Size 12KB
SHA256 8edcf979354f5745b4a2e815612b7fb5e086834d00c85ea4c2020fd1c6580354
MD5 e418a26a062938b637bebe42fe14cc48
SHA1 3ca11a6400e9a746a6964ae25bf979d7586f01a5
SHA512 ff47de9ecda8a0d48934411bad538755f1813480aee245ec34acac16736ede2441f02757e5f9ab73ca7b83528c0b512118559336d10124b39fba81f397c9c2e8
SSDEEP 12:7+tn88qLmaDryNTSFby+uF20oXz59T5PbERmBEyPbND:7+tnPqLXysATgn9GSND
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db-journal

Path /data/user/0/com.izzld.browser/databases/qapp.db-journal
Size 512B
SHA256 8203b67a40ebcec1c9358622c8858e25e29e66b806d821985da02a1f01b01081
MD5 0f22178c5ca99e96cfe2215fe1d108d6
SHA1 c28524d29bb581392f7dfa66a179eb8c8b2b8d2c
SHA512 162e2ba98b613063287a46385215d66908b384719aff4342ff0af221403e7f35de0553d56af0bf52a667712e784fc767029eb1afa636bb8e301b45747756d72b
MD5 SHA1 SHA512

Submit Download

qapp.db-journal

Path /data/user/0/com.izzld.browser/databases/qapp.db-journal
Size 8KB
SHA256 ce08757f79ac380ceeb73df77de14705561a7bdb9873eb446eeab7521f8ce742
MD5 0ccb1f3ca53f6f844ada3252c9e4d4b2
SHA1 e4945570f9aa94e1eb519fea74c14d50ee0b57fc
SHA512 356710005d2bbb87d3c210c34ac9c2d965e147e1defc73e8bcc662d2f176c02d174e2e2f5e04be30e37435d950e9f3155e5ab37a20ca168a586da93874d90c75
SSDEEP 6:7+/l9Cn1dg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKGj:7+tIqLiuWdYRmBEyPbZj
MD5 SHA1 SHA512 SSDEEP

Submit Download

qapp.db-journal

Path /data/user/0/com.izzld.browser/databases/qapp.db-journal
Size 8KB
SHA256 cc4e35c02549f8b8b72aa9b9eedfe5273a081246f87148bacba36db6fd482c74
MD5 4368fecae4d4b7b47cb154edad497669
SHA1 1f9a0a22bd62d5a6a0d13d88bfe10a381af9d690
SHA512 6867a9af7c2cdf27410aa13c4fa891ad2f697fb6ad5f5d6a134531b11f1acb6bf08ea07c01be0f58ec3bbab4e443f93c7df7c92ffcbc31717c0f562caa798bb2
SSDEEP 6:7+/l9SPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKr/7:7+toqLJdeWRmBEyPbE7
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db

Path /data/user/0/com.izzld.browser/databases/weave.db
Size 20KB
SHA256 81dcf3fe146c2286cf60aba01d6a524b6fcd562a2f15cfa02a8089529b656494
MD5 752608f9dea9bc0e9004cacdf1f2fe57
SHA1 b9c2b87589f0798060fe83d87d37f28ba4bcccc7
SHA512 5f9476cdbe07d7f7bec21a11cbdcdd1443295364b07c60fac65cf8ef919a6af4fd60adfc81de11a1d4219629f6007a8abc1395fa5a3f18c9a61dcea7bd4269db
SSDEEP 12:TLmaCyNTSFby+0qznu7AurAuC59CB5PbcaGRmBEyPbAVOwG:TLXXs0qK7L30CMadGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/user/0/com.izzld.browser/databases/weave.db-journal
Size 512B
SHA256 700b2f4f97385cc21bedcc4a5f80d4de23525966e89d11aa4d097902622e9c66
MD5 eb79a2d1522087f4151882e33c6f2ed3
SHA1 c234296142fce608b9a363927e07ec02aa2bf682
SHA512 1d30784bed3584522cefbd8a8d31361bb29ac7a648fe1b56178f6b186982ae145c96f0b370f521c220f6fdfc4d05037796a34797b8c6e522a941326a8121416d
MD5 SHA1 SHA512

Submit Download

weave.db-journal

Path /data/user/0/com.izzld.browser/databases/weave.db-journal
Size 8KB
SHA256 4a70ad0e56d6326fbd5a78b9911c20fe23385a417ba52fd814b28755ca27d723
MD5 0daf51c5e65a025d5f4b4b01fe6b28d3
SHA1 570005425c65cec168d8997332f1838b8636ed51
SHA512 5328a49c6e6d992b171745ead172347ee6c6c2ee7adb3d6a08f81687567e40b4a697cce7736065d2654a8397a9538f7ba87aca6aad710b46e9a567141adc8d67
SSDEEP 6:7+/l9Y8Hn1ZO+Wg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK5:7+tF/WqLiuWdYRmBEyPbG
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/user/0/com.izzld.browser/databases/weave.db-journal
Size 8KB
SHA256 e99f44731b1fe7dabd7663a1e1f9e02a07faac024d6c830307b88ef61762ec46
MD5 d269e4593d0d3d0431c919d0027f1b3c
SHA1 4335e9fe7bbd45762fff61d05e60f090878ab19a
SHA512 8b2425d5c793188cc49b5753ed2697b41484e632b97f19010f7f940a4ded6908523dfcef0cc618ffa9da9119d913101d618917e82710d302bf51cf3188545ab5
SSDEEP 6:7+/l9DPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKc/w:7+tVqLJdeWRmBEyPbDw
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1718242032690.env

Path /data/user/0/com.izzld.browser/files/.um/um_cache_1718242032690.env
Size 546B
SHA256 c3fb8f270e14d15d4e5a99f52b2475649de2aa6b346be0ab2bdb4f3228274159
MD5 7ee51e0ca50e54d1763beadc01a9261c
SHA1 7d2542cf8e5b5a2e6a178a812f898c093dcdd131
SHA512 fb73fcc7be77da8eb491f3300d62ab4379d7202a2f9e842e16261bad295702db96f9431780a869a1198701805c95276d5fe31da53e9016e25b3ff8ea5de13dc9
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.izzld.browser/files/umeng_it.cache
Size 245B
SHA256 163e64e3c9f2c9b8ad1b49650d1332dd72065cd0ce672a78b8958b71cdce2fd9
MD5 99abc26709949be75c8e3ab87a75f71b
SHA1 d60f5ea4b3a2d3615a02379b5ca1123ffbf6af2a
SHA512 890f200db1e1a13ba5df48e2234f09e03fc184bc0b8bd7444f7d7268423ba7760e036a9741bad7b341ad6845b6b72fcddcff2c49847da00da3982a3d9b9ab423
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads