Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2456172s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 09:24

General

  • Target

    com.qihoo.plugin.splash.apk

  • Size

    670KB

  • MD5

    dedfedd73b92b9f264e5244ab5d76fc1

  • SHA1

    7da66f9ef927cfebc2c103d7454ce00bf00e7d31

  • SHA256

    b606f0029b8403132c706d3d31b02b8880ef951be7fdd9cff6cee04f7d15330f

  • SHA512

    81c646fa27c1e5adb56e6e0895c2cae1af6b0398ac5590c170fffce0a3c88ca56439d911b600d2e231605bc4e6314c2c84636ed1b7f1a9b6d4ac4f55f5e0380e

  • SSDEEP

    12288:N/IsDcayTTDKEMhuxi+gq6NMiB4rNrOSSqXDf61U6c5L9dZ+N/sT4IFAkvCfCb:5B6TDvMhv7q6NMNrNrOQuUdTkN/sT/24

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.qihoo.plugin.splash
    1⤵
    • Loads dropped Dex/Jar
    PID:4996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

    Filesize

    153KB

    MD5

    bc3cb0eef1d19c47cf3f1a2211258aee

    SHA1

    7f10b763a43b6900cd9925b014c1a794994d37dd

    SHA256

    79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee

    SHA512

    51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86

  • /data/data/com.qihoo.plugin.splash/files/torch/single/core_update

    Filesize

    13B

    MD5

    ea6a9c381727a5f92d469fb8802d0d3b

    SHA1

    1ada4d28aac1ebe4701ceb3612b33cba0b93345e

    SHA256

    014d0ab4c0be6c0fc3836cbca6ea8ec34a81ed7c7e4f4266fb6ab20b9dc52919

    SHA512

    3aff8efa09874aec404605cc59b33d8f29b0db511f9e715d78495331dbba6ad47599dd45f094aa3202d9ba1bdaf166c66dfe70bcc9b4bdf5fdf339fa33233623

  • /data/data/com.qihoo.plugin.splash/files/torch/single/waitingDown

    Filesize

    13B

    MD5

    35d218c7a54af7b9a25b3f4e3dc95348

    SHA1

    bd263672efa4b9b5a8dc6a4a352918ab19f13fa0

    SHA256

    ef914ce7dcb6c24e6ead5a1cb96feed0d08cee6f6d2d035c893eb568118d0e87

    SHA512

    80f4c5df1d49b6219c11d8f7f6d6542b1ffc5887d5a32879f57d0062a124a76973bd70c5b479beb554d9c14f053f340e643dba71f36cc62e3e1809a0dd3507a9

  • /data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

    Filesize

    346KB

    MD5

    7ca872b45694937f04aca732b336950c

    SHA1

    762652d725c00e27a3a9316322fb0049b154cf45

    SHA256

    d482194392c58bab488d65622c27be7a91f673d1c3398e9dcfcfc015f20ce7eb

    SHA512

    260b9bf7a17e0e71cc5e05d447c578c062c80dfe35b27c658bda6c3071a30a1649e2181f287d0f3823d34f99aab604fb8b520da7cd9e1f9ce7b6552d5897fbf9

  • /storage/emulated/0/Android/data/com.qihoo.plugin.splash/files/.sfp/.sfp

    Filesize

    83B

    MD5

    fc812b9c08e4ea668fe32ad5e056c6db

    SHA1

    f43486d387fb2d7dab957e45c06d0b84566e500a

    SHA256

    8447e935418bfe29f9a7e721d7330625a981dd3d22d76203f5ef81ae19d7059f

    SHA512

    9c112c0b98f99bb10fc7a5a8c7c56cbdf551531ce1558f586ad50eee2717861476569a0207dff59a19f57b08f203a19400420f3ab30ffe260afc217917342970