7eabbade0ec52f14f84092fff25365d314fc5d9c50ce7d402c391a7fcfa271e1

Analysis

max time kernel
96s
max time network
178s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
17/06/2024, 05:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b6e3f4e381954a7708f2701c3b923b3a_JaffaCakes118.apk
Size 13.2MB
Sample240617-fpdtxazbpp
SHA256 7eabbade0ec52f14f84092fff25365d314fc5d9c50ce7d402c391a7fcfa271e1
MD5 b6e3f4e381954a7708f2701c3b923b3a
SHA1 3cbc7e59b7a66b8f075c5d1515d6105dd087a421
SHA512 dcfbf4ca66f787147dd9c130003c96c4c79645b355b5218e6e08b5ec714aeaba2b011c1b528c21cdd059386c99fd72e26aff7837c84a99f91dbba2124e79a644
SSDEEP 393216:7PFqiFIiZPd1Sik750oGCFoMPP9GRK29yy1:7UiF/ZKik7nFbP1Gpwy1
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	mobi.infolife.ezweather
/system/app/Superuser.apk	mobi.infolife.ezweather:live
/system/app/Superuser.apk	mobi.infolife.ezweather:live

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	mobi.infolife.ezweather

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	mobi.infolife.ezweather
Framework service call	android.app.IActivityManager.getRunningAppProcesses	mobi.infolife.ezweather:live
Framework service call	android.app.IActivityManager.getRunningAppProcesses	mobi.infolife.ezweather:live

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
31	api.ipinfodb.com

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mobi.infolife.ezweather:live
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mobi.infolife.ezweather:live
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mobi.infolife.ezweather

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	mobi.infolife.ezweather:live
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	mobi.infolife.ezweather
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	mobi.infolife.ezweather:live

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	mobi.infolife.ezweather

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	mobi.infolife.ezweather
Framework service call	android.app.IActivityManager.registerReceiver	mobi.infolife.ezweather:live
Framework service call	android.app.IActivityManager.registerReceiver	mobi.infolife.ezweather:live

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	mobi.infolife.ezweather:live
Framework service call	android.app.job.IJobScheduler.schedule	mobi.infolife.ezweather:live

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	mobi.infolife.ezweather:live
Framework API call	javax.crypto.Cipher.doFinal	mobi.infolife.ezweather

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	mobi.infolife.ezweather

Checks memory information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	mobi.infolife.ezweather
File opened for read	/proc/meminfo	mobi.infolife.ezweather:live
File opened for read	/proc/meminfo	mobi.infolife.ezweather:live

mobi.infolife.ezweather
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5029

mobi.infolife.ezweather:live
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks memory information
PID:5310

mobi.infolife.ezweather:live
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:6107

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

1004

Path /data/data/mobi.infolife.ezweather/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

1004

Path /data/data/mobi.infolife.ezweather/app_crashrecord/1004
Size 8KB
SHA256 4fec17aeb21ec8bad0f1ad33010a384638e489d2541fbf711241fb65273dfbb2
MD5 015e4b9dfd5b3b2b9cbc14fcecd0d67f
SHA1 2e1b70e55999af050d8e450ca47edf6bebadaf6a
SHA512 2314f7b370e6bc1c6b6a3be3ec17c7cdca32df3f253843b6762d122a83ca24abc80d6cbfefdc17b1ef3e24d26663f6921da8d69bad76abb24eaecc22a19a0be3
SSDEEP 24:7+tvvqL6gQTNBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSo:7MXq2DN85WuAriStwwuMN5meposSo
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_
Size 52KB
SHA256 8778264914eb80c36dade9244460cea4b4818579b29a2cfe577c7add30c889de
MD5 75e5b0d5a81e623cc1350537cb7d91f3
SHA1 84e5cc1f70035dc2ddeea8bce42c130cb99b1d4c
SHA512 0c9e9d5eb640e129d6ff6b02162deae701ecb27cb643105fd2e5d0aa8260b0c5d4926c68fbb78366bae25b0a3374354c45186dd0992a512bcdaa85bc5a84ecbd
SSDEEP 24:TLEQkBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGScYIsXtrLSUcMPCi/zOen:TU85WuAriStwwuMN5meposSFXx1Ci/z
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_-journal
Size 8KB
SHA256 5a97b21f7e81411a69d3c2d83ba73db63e3303838c1f2e41b3c7643932ee7696
MD5 623b74933554f343c1276109f1e1b742
SHA1 e57ff3e1aa3c588d5d6789bbc7202f41f1ad8705
SHA512 16d9bb32651afa35909fc5b627c044829734f46860a90d2512f36795fba45d55ef836ab7c01e804a1b3e08976472692231bc92e898103d96fcf1487e28498f25
SSDEEP 6:7+/l9hl8HPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKmC/T:7+tF8vqLJdTRmBEyPbMT
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_-journal
Size 8KB
SHA256 d82f5c7424d8e9477a65c5c34d0d8d4faeb092ca0e0acfd9be20d8cd60cef034
MD5 d95036158ab60970a7bc1a3375ff0d2b
SHA1 549ec343975692382a4accd6bdee201c4afae4d7
SHA512 1e63d709e8624de7e30ff7392fc7afb84113602d743f4354381fd945448027b8085c2b397668dae120d3799f9341738e77bef378dd5b4dc1d9ff810cd97eb4de
SSDEEP 24:7+tbqLLQLBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSb:7MbqE85WuAriStwwuMN5meposSb
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_-journal
Size 8KB
SHA256 08e9a7637eff2b3a5bfc3e130bb8984ee89051bc23046e24d02a22117e5fea9d
MD5 a2699f6eaf38c172b3840824cee78768
SHA1 e06ccc1efa3995be0ffdadfaad788bb1b2754186
SHA512 de74e1246c3a07cdbc177ae27f2dc2fde3e4afc4047c739053971e4e210f1a7e8a8e49d20550cac85a8339f65d70245549f5dd64d1b76973ab2719c192cb6440
SSDEEP 24:7+tIqLKXQEJBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSbm:7MIqOJ85WuAriStwwuMN5meposSa
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_-journal
Size 8KB
SHA256 491be8d23229a209ded29166c927be97a715efeb396dfbfc371a34ced526e465
MD5 828dd6736e0563efa6f14d5d5f4a463f
SHA1 77a5c377bf93b595e3b63c6100c12b76f0e22dde
SHA512 1d0c7a870cc940db5aeea78d499d5e39439fd35d57c42885f8fb059d63d4276ced87533b54855a0e72f9bf6f07185d74b8f2d3f8b31777218b9727a07ffdaa15
SSDEEP 48:7MNU1Ci/vRqk85WuAriStwwuMN5meposSq:7L3/JO53Azwq
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_-journal
Size 8KB
SHA256 20434422b8d9696e0858fa3ce7241f390e3d6d50b4acba0dd2a294672082d459
MD5 23daea90ebd311970f0902623713d159
SHA1 ddb1526b5ad3d476c4b036f053568f4b30bc56e1
SHA512 6387348caf4727a2f9a46469689593cc8878f08ad1f914a6322d568b46ab53c5272c6e04db6c0de77b75293803257ca3ef78c219e7db964499a9bb3cf7f46f2a
SSDEEP 24:7+ta5qLGQ2Bq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGST:7Ma5q085WuAriStwwuMN5meposST
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/mobi.infolife.ezweather/databases/bugly_db_-journal
Size 8KB
SHA256 74ea56d77d9136acae30a887f910059954f09f1ee2ab7145dd06a4ef1e019565
MD5 c23151ec0eeeaf3814c9348fa4a8bad3
SHA1 4dd212367627aa7264e5fcb5d959ecfcb240ba89
SHA512 3ad4b73679e6ff642858a1e967b6be6330413af3b722d865d13b15378d2ecf07738eb338fc091c71638da2ca17b4351f384d0793eba5568da948202bb8d5e46e
SSDEEP 6:7+/l9mX/Gn1OXRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKqin:7+tyBqLiuWdwRmBEyPbbi
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db

Path /data/data/mobi.infolife.ezweather/databases/sms.db
Size 24KB
SHA256 3277bde32ad1f44d98015f368314f8d8c4e565ff2344bfa84044edf278757e5e
MD5 e1b4710fff87b9675e122c072b3c9873
SHA1 f2bedf67c2d0d4b6723a804b08cddcaf79363839
SHA512 b757d1365b9d9756b1aba16e87b82707869e4eee06ed6487b978d1340136be90c1a7b9d499d5c3f0533ede388a909dfa9ec7ed608986d77c404eaa1e964074cd
SSDEEP 12:TLm2rlTSF7VzuOEys1JXLoE2uruhaquMwGasdNRmBEyPbD3Ow1kA4Lw5J9:TLm2rlpO6z12uruhhuMzasIGSzOA4EJ9
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db

Path /data/data/mobi.infolife.ezweather/databases/sms.db
Size 24KB
SHA256 d504c3d9649b300a1a74b0e46e6a6749bc2f4987b9cb11a47f681ec3f02af17c
MD5 9ed60e7828448a943257c40edd75ecf1
SHA1 832484739813194c1d67708c38d2beee1da201b5
SHA512 cf7bce070d7af10b8244e5291f3b16d6a6b831bca9ff0dc134b280354362ebbe870ad13fde4e604db489dc35644e791d1fc3f5d121dfd8131b562c98faeddb93
SSDEEP 24:TLXIolpO6z12uruhhuMzasIGSP/ytA4zZ:T7/A6z6z5vSP/UA4zZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db

Path /data/data/mobi.infolife.ezweather/databases/sms.db
Size 24KB
SHA256 227f50f33650c1430d31e25ec5a4d1fd2beb4567103de206fa972a02ef54d199
MD5 e5863612c3826fec00b27851af2b6cc6
SHA1 5a304453e350c37b3d4f13f7f65c4245d6da8c52
SHA512 8cb88c64c44bf9223fa5257263868fe7317f2cccfc4eb96424422729b9af5cf93b6e3ee358a8aed9b5a35c012e41bd1f5a44eb2b316432f36d3960d1ffdef24d
SSDEEP 12:TLEalTSF7VzuOEys1JXLoE2uruhaquMwGasdNRmBEyPbP/hqECrA4LP12:TLEalpO6z12uruhhuMzasIGSP/hEA4zY
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db

Path /data/data/mobi.infolife.ezweather/databases/sms.db
Size 24KB
SHA256 a20a90f3e9b25b45274c2c385474959599511fce73b8846df5b572529f9a1479
MD5 4dd3a3b257c002120df138a1cecdf8e6
SHA1 c6a011d1339a119573c571e5e929051051830752
SHA512 66edab04f1da950a7b01032d64f60caaf689301f0b190f61bd69d8e5f5bc9e701625fea6e6816202412abdf15a4af8a7ba3680b7976575a15dc1cc4d2e76ef24
SSDEEP 24:TLi+flpO6z12uruhhuMzasIGSP/dSA4zfn:TO+9A6z6z5vSP/dSA4zf
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db

Path /data/data/mobi.infolife.ezweather/databases/sms.db
Size 24KB
SHA256 f99c8f59b1e52dcbde67834170fd8c49f6e2bbc417e6f4dfd74861fa467f1ebf
MD5 6430ee0dc9ec0b692868f3fe08ff2f62
SHA1 5579b60d352c754974fbd8f83aea40b19355b8e9
SHA512 edb701c24aa48b2342aa27b18fc6d6a72534f9700b60aa45a686fb08e84eb7d3eff6efac36fc062f343094a0c4cf23f1dcab961172b587fc336c743efa14a90d
SSDEEP 24:TLqWBlpO6z12uruhhuMzasIGSP/eSA4ze:TGWXA6z6z5vSP/eSA4ze
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db

Path /data/data/mobi.infolife.ezweather/databases/sms.db
Size 24KB
SHA256 91a7c2a4505539df5304d188478cfc443a095b775538b457d7716bcee8e28928
MD5 2a59860e3d128699275ab0df81e0b503
SHA1 86e25c64f5044c9af77e17d169052c8878623e62
SHA512 d90a349678e0aa0f3b4e6355176d4636fcdb7f9346afcfece5e12639c5da0f36950a5abecdb88859a99cb2fa74a7865fcacd0f3837472a47f10467175c1fd90d
SSDEEP 24:TL6IllpO6z12uruhhuMzasIGSP/3hSA4zd:T2ILA6z6z5vSP/xSA4zd
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db-journal

Path /data/data/mobi.infolife.ezweather/databases/sms.db-journal
Size 512B
SHA256 271bbbced7c7cc866ba1d0378470dfd8dbaa2aa2319c802f7b3ecb5d8085f8a6
MD5 ddc952ef16d83ef908a4c1b9d6c5d4b4
SHA1 87a7deb056508a2d9152c8a0cf70fa1707af37c3
SHA512 eb9022427eeb1478a55ef9c1cad59acfbcaf42a2d2284757d4ae2bf393fdca4495356261a09ffd7efbc53f8f0cbd91d3b471ab7f9ac7ddcef5aaf3b487896a0a
MD5 SHA1 SHA512

Submit Download

sms.db-journal

Path /data/data/mobi.infolife.ezweather/databases/sms.db-journal
Size 8KB
SHA256 52bd760571b12e2f62e21691935ce0a44f19bf532c6667f16593e098dd8408bd
MD5 7140bfe3ab09d3748ac7d72a070ffbc0
SHA1 37656bb81c24a673bfcd3e989c67262fe94ecf94
SHA512 d2b83effb22330b5debed833af3d9f7a5786338419576ee78c40bec9d5bcfc0a39230f25b286fff1a7ebcae61b5ce5da92b3fd1c71ca1072672b6c3945400ebb
SSDEEP 6:7+/l9EHn1I5Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK6J:7+tT5WqLiuWdwRmBEyPbLJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db-journal

Path /data/data/mobi.infolife.ezweather/databases/sms.db-journal
Size 8KB
SHA256 256e698139d902eaade6afab25e5ea75a509868def2f2c09985d32eeddeebd6c
MD5 8422905ed15466f8835df9b1219e6997
SHA1 9d80d74aa4b028e1366be77341c62142798bd4fa
SHA512 51680d5d924dd4575667e155622fd1e460543e377cfb8c9c371525c1e4427d421bd79925d5eec9ff74ba497b8419e94c5853ab6d36d265c6165aef9ee44e214f
SSDEEP 6:7+/l98wOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKkHVM/3n:7+tZiqLJdTRmBEyPbBq3n
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db-journal

Path /data/data/mobi.infolife.ezweather/databases/sms.db-journal
Size 12KB
SHA256 c36fc0f2334e4d42a4cd4cccafbce979e6f3b395cfe7c6c32acdf592d9d83414
MD5 01f16f8805416aa0ed9d62f5b4d3c265
SHA1 5d06217513f69a97ea19b241d82a0f75dd128c5f
SHA512 9d3222ab30583dd7900985565e91cf3bbe4c3df6a835036c21a806ea10f79c127e977657270a23ef6b96da0ef8bd5c8695817831c04978feb00347bb73cadf0b
SSDEEP 12:7+tTNqLxjlTSF7VzuOEys1JXLoE2uruhaquMwGasdNRmBEyPbPq:7+t5qLxjlpO6z12uruhhuMzasIGSy
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db-journal

Path /data/data/mobi.infolife.ezweather/databases/sms.db-journal
Size 12KB
SHA256 d3fde3795248eab23d826be5db6e96055069865eba88074762199fdc89b3af97
MD5 2d883f62c7d3eaa2f4c75b64d0d3f647
SHA1 c0598f6f6800505d664d136d289ec689199ec39e
SHA512 ac2d97f3f63db9ae194245553379d4533b4890c1b1fd963cfe555722c4609ee188d40194906121fa4cab9998af0f12fa910a757cebb5030201b4e361840809e1
SSDEEP 24:7+tmA7vdJpRqLm2rlpO6z12uruhhuMzasIGSg:7MmA7vdPRqK2pA6z6z5vSg
MD5 SHA1 SHA512 SSDEEP

Submit Download

sms.db-journal

Path /data/data/mobi.infolife.ezweather/databases/sms.db-journal
Size 12KB
SHA256 6b2bde7cddd0f510a883eaba7c0432f7b65b15e28035e34e02ef485098cc0494
MD5 7464bf635e2a9e24d076c6fdf5187499
SHA1 16e87c4de7a982f6e6b3010cbb7ec14dd8bb162f
SHA512 24d09d02d886c8211c54380e47c619bf8fb45c24193721b672c1d6a9c6865288ec72488daf507f6f5fd18c4276c6bf6f5404f074d013ef1b1421591eb24894eb
SSDEEP 24:7+tynSAdqgqLqWBlpO6z12uruhhuMzasIGSSJ:7MwSAdqgqGWXA6z6z5vSSJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

tray.db

Path /data/data/mobi.infolife.ezweather/databases/tray.db
Size 28KB
SHA256 4c28684666f55430cad422cc66901c4204cad00ecf65cde78b8f40a88a6ace1b
MD5 b97ce367de6a1bd969c9aa9302fc3224
SHA1 86c0353679c0b5ce9a3009a208c5703b3508750b
SHA512 42bca299a54332182b5e45a1befe77d62cc793c7af2ffe8394c5da0f755bf20885743fe04e3fc8b16b46197e79d94951e59d85db0c0f311d50893dc9f34b15f8
SSDEEP 48:T2r9T9AhSrrKF3xsB5XHCm3Aga2Avvvsv3vNvFiLO:ir9SgfKFhsPHZwga2A30/FtiLO
MD5 SHA1 SHA512 SSDEEP

Submit Download

tray.db-journal

Path /data/data/mobi.infolife.ezweather/databases/tray.db-journal
Size 512B
SHA256 c92153913536137d0d94dc37b7806dd9b9b5ff60b079c648fe5f38e7ce6f4fd3
MD5 3e24b99d1500bb421efe90cc133f0cab
SHA1 bc9c6560a43cff3b73fd50adf62ba9bb70784d3e
SHA512 5a0dfe7c5cb7527812b913c293ff3af014242823c60bd5d0a9c14ee75d7e90dcaf0b3c79db3b13226ee29745e66d215a7b2264ad23a906983fecd2cae5d12b2f
MD5 SHA1 SHA512

Submit Download

tray.db-journal

Path /data/data/mobi.infolife.ezweather/databases/tray.db-journal
Size 8KB
SHA256 098ceb8b8d2267aa14a3120e010095275053843b7d023edb616fab245056cf2a
MD5 9c686811cb941397718b6b8fbc15f397
SHA1 16f99740c0021633355feaac9cbe7b670cc07991
SHA512 7fbebe0b664c80a5d6dee59164b64638a122462201caaae82f226eca493040275ea7777b8128e6f191be6f909bdadb6624e524110e22d75a6519c912bfd1eba8
SSDEEP 6:7+/l9XkoOn1rvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKMn:7+t1hkqLiuWdwRmBEyPbLn
MD5 SHA1 SHA512 SSDEEP

Submit Download

tray.db-journal

Path /data/data/mobi.infolife.ezweather/databases/tray.db-journal
Size 8KB
SHA256 53c76068ea5042a075fb724f5edca210d6fb0064668eba807e02cc61b64164cb
MD5 2c37fa007140d85b59ae252ca41219cb
SHA1 e475e5bbea3d795ff46ecb38e8b5e1ac45062f05
SHA512 d94a6b75e9a1fad58497cc4c69935f743197cbbb3bddca969182d81243bf7bb8a86470c9f84998e6792470f27fff9d5aae5c340e34f0922b847bfc05cde2dd0e
SSDEEP 6:7+/l9yPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKD/L:7+tkqLJdTRmBEyPb4L
MD5 SHA1 SHA512 SSDEEP

Submit Download

tray.db-journal

Path /data/data/mobi.infolife.ezweather/databases/tray.db-journal
Size 12KB
SHA256 7d3f637957a0ee8f15a85a0d5e3049b22402a6878d3541d6253cf867e965abd8
MD5 6715a2a64bd895ee8005cb4649368ded
SHA1 cf0b715184760ab5ede5efc207cbb1c43d945011
SHA512 516daeee76eb981d5d18c8ac364e8323affc6ab51623df87a933d420d887bece7d281725b3ad75a24b80d464244a4b53c3b685f61a253dc568714397265a0a9d
SSDEEP 12:7+t71IqLbWelSxQGJFSTFOnvyBPDiPNIJuQ1KLcUviIUTFOnvyBPDiPNIJTOf8R6:7+t71IqLqel+ajBLi0g+jBLiAOPGSD
MD5 SHA1 SHA512 SSDEEP

Submit Download

tray.db-journal

Path /data/data/mobi.infolife.ezweather/databases/tray.db-journal
Size 12KB
SHA256 062c0d29ec962e6ba64efb2fad49ffaef03aad89b6bb36b9984feb0f1f494e74
MD5 cb64d00d045a90802e459f3cde327796
SHA1 092848934d3f866fd356a29529db02c2a186cacc
SHA512 3f27db17fc411a9a451968caf421a154ff22eb56ce75ca28f4a37c03479b2e63c7a011dc41241f7b36f2fa00912ab55a05b45a0a75b9c1cec2a90aa0638da3a1
SSDEEP 24:7+tLmTARqLEaiel+ajBLi0g+jBLiAOPGSdW:7MaTARqoai9T9AhSdW
MD5 SHA1 SHA512 SSDEEP

Submit Download

tray.db-journal

Path /data/data/mobi.infolife.ezweather/databases/tray.db-journal
Size 12KB
SHA256 edf3a9976bd892b3412b7bb374cac82a777486527ebadc19eecb0e6265c6b1f4
MD5 c0f91d6df4f02acab7a67ec1e7d5a18d
SHA1 03110fe95235c93f8e5c45dc902001cae764fa20
SHA512 2c343f18ae7fcae8c7b49aa5c9c81c1f9d6d345fcebe6ef6fe40b4f6a61b8dff7b93f524cdc436bfe3008bb8becde9ba61f42a4697dca853a14257e44cbb5f3d
SSDEEP 48:7M/vsv3vNvuTF3xsB5XHCm3Aga28qG9T9AhSX:7M0/FWTFhsPHZwga28v9SgX
MD5 SHA1 SHA512 SSDEEP

Submit Download

weather_db

Path /data/data/mobi.infolife.ezweather/databases/weather_db
Size 44KB
SHA256 ad123187ee1c5325e46c7c10e9d89766320dd17d4ffa3f06f3d12e62d5a120f4
MD5 dec930e87baac9d7c5e35eea4fae539c
SHA1 74574653a7c432dad200a28b254e74d5e8ba472f
SHA512 7f9a4a68ba204baf6e94b956866b3d7e88eecfddeaf50d15112967a36932f7764318298f344e3b4afc41c5ad3cd8a10dc6bd93f7f9284b095209e597096048f2
SSDEEP 48:TU85WuAriStwwuMN5meposSobbBDaCi/WcCi/yXx1Ci/kCBaxdmOmIopf:753AzwwBu3/13/8T3/RUdm1hpf
MD5 SHA1 SHA512 SSDEEP

Submit Download

weather_db-journal

Path /data/data/mobi.infolife.ezweather/databases/weather_db-journal
Size 12KB
SHA256 f8a13bd7c3e63e011ad209b9e52d809e23068933290e063d206ad0301fd26d86
MD5 2a90dc6a52c9f06c2109f5579d646996
SHA1 6ba6adb7979400b073c7d18fe0b1b353a4fcad13
SHA512 87530a25df80ce5649af0cf8076355ab1cda80cd97e212783a9391beeb09dfdf62b4bf920c9a7e6222ab710bf11f789ea82bfd7b6abd69808a9f5adf10504e85
SSDEEP 96:771wHZR/uC5jqGs7hcNS/9r09jGl80btiGwXt8yqXlvwvaJ7V2Fba:77mRzj5s7h+S/9rMjGl80btWXWyFaqFG
MD5 SHA1 SHA512 SSDEEP

Submit Download

weather_db-journal

Path /data/data/mobi.infolife.ezweather/databases/weather_db-journal
Size 8KB
SHA256 579b5689f9b757067876eeb1878d8afe8ef21e24b05c0c9a83dfd7ef489afa10
MD5 959db99a165334e71806e6021927b253
SHA1 0ae671b644d90d8f94d623ae896d5809609fc0cf
SHA512 8d03627a7499591871af012e9ae9264b245f3a428726e51b0da9084a061c849505840923031962e08864921baa361039161a7279c19f1e1f0ba9ce42181aa426
SSDEEP 96:7Yu4wHZR/uC5jqGs7hcNS/9r09jGl80btiGwXt8yqXlvwvaJ7V2Fbv:7Y2Rzj5s7h+S/9rMjGl80btWXWyFaqFT
MD5 SHA1 SHA512 SSDEEP

Submit Download

weather_db-journal

Path /data/data/mobi.infolife.ezweather/databases/weather_db-journal
Size 512B
SHA256 f1c1bf5075092e31bb3dafdc95fea5e47e4b9adee7ea85dc9a14db1ed415bf42
MD5 5cc5017f9ea5352daae8805b06324de6
SHA1 a6e23baf7ec43f03a787f9fd3870fc4a1181fbd0
SHA512 ef793b9baba0d87802f9a3498663e97b841dac04ff1668df971ba83912956d07af4cbcf6b5a243afc624a81d18552e3984c21786407b227d89e9c0fea9738897
MD5 SHA1 SHA512

Submit Download

weather_db-journal

Path /data/data/mobi.infolife.ezweather/databases/weather_db-journal
Size 8KB
SHA256 a23a8e4676f9411bfcdab5a23dd0eaa0ccc9aa53ac04287ba3344b565846976b
MD5 eac96aebb50889c0b86129722f989c31
SHA1 b402620063a4d0b1202eac44ff9c3410a49a34ea
SHA512 d9ea8f25cd86b09742ddb213019c3aa457075121e6b838e9c4d022555e06d9a624ea2ee1f6de706b6f4fc33f809b50ec55001d3eaa53b9b91d55bed96164199d
SSDEEP 48:7MNcCi/yXx1Ci/KqE85WuAriStwwuMN5meposSg:7j3/8T3/Ku53Azwg
MD5 SHA1 SHA512 SSDEEP

Submit Download

weather_db-journal

Path /data/data/mobi.infolife.ezweather/databases/weather_db-journal
Size 8KB
SHA256 97b67d7bc54ba012a5a532d54fcae6793bb009be8717a63745d7dd19aedb37a7
MD5 ac786a8158d895310d8340fe26279644
SHA1 80ef59ae59026d8a49db355b7afe362ff00dfa27
SHA512 9aa890586f0016e176389dbceb49451ad2bef3296c68606fa0369117fc6721443f0d7a51e09f044d94b107ef9aca7e0399006b5cc8dd86e23c17331aee712d14
SSDEEP 48:6yJXVXx1Ci/2qU85WuAriStwwuMN5meposSH:6eRT3/2+53AzwH
MD5 SHA1 SHA512 SSDEEP

Submit Download

INSTALLATION

Path /data/data/mobi.infolife.ezweather/files/INSTALLATION
Size 36B
SHA256 ad8ae8e233cfc8f2aeed98195221d3ce2130e6bf435cd3381ad6ca99d85e6b3d
MD5 e20ac14a891ddbd49113b94f58f03050
SHA1 9fc38d4240ae25c0d0e911f3e7788bf9a7a6c0f3
SHA512 d281ba3a061cf4be2cdb40e601e799118d4857bbd94ae0f900bd602a50c1276a3e11a99ce067d95c83631d91f426a58d0aa3d16b8bacdba8b8cef37561564b6c
MD5 SHA1 SHA512

Submit Download

city.xml

Path /data/data/mobi.infolife.ezweather/files/city.xml
Size 375B
SHA256 7cbccb40d89a430a850c6c7265617609601537dd2a19174ea080d4b6e4afece5
MD5 131c99fc01e36e19a164845929fa13b6
SHA1 ce41b89a41c2e2a59b465ebb6dc8626cb51485f3
SHA512 77752ecdbfbf34bb1e754566011edff50fdbaee39f9c9ff4708f24d157edcd8aec3a872c2bf6a06d6b4a825e75d05ae258109681b93152d742413949f32f3b9e
MD5 SHA1 SHA512

Submit Download

locationCity_51.0_-1.0.xml

Path /data/data/mobi.infolife.ezweather/files/locationCity_51.0_-1.0.xml
Size 22KB
SHA256 35df787d5fc3cb043051ef7099ff86b262f9275ba869eb48e8b88dff3d77b1f6
MD5 8fd9791626779dc4494ced739887b5bb
SHA1 245fcdf7a2d8a840edff18e567469e3dee04bbef
SHA512 1498c3a21f02956b48ac1a17911fc4a6ce8804201bbd1eaf8f8167bd16a73e441beeb1d4258d75376fe9bf3c43ea5f9a16881c7eb4719fb3b275f11c3501cbb1
SSDEEP 384:L2LXLmyLutaaLSWUlLo1ALDaT1Lg8MhLpP97Lgk9TLAsSHfLo6z1LpJMQLOvYLLt:K5+
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads