Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
6714070a697...1e.apk
android-9-x86
8714070a697...1e.apk
android-10-x64
8dmss_v2.apk
android-9-x86
dmss_v2.apk
android-10-x64
dmss_v2.apk
android-11-x64
dump.apk
android-9-x86
1dump.apk
android-10-x64
1dump.apk
android-11-x64
1dynamic.apk
android-9-x86
dynamic.apk
android-10-x64
dynamic.apk
android-11-x64
Analysis
-
max time kernel
2603041s -
max time network
164s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
23/12/2023, 19:03
Static task
static1
Behavioral task
behavioral1
Sample
714070a6972645f5ec8b990bed9755c23e9e169a0e40bab1e1d02ee702f8ca1e.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
714070a6972645f5ec8b990bed9755c23e9e169a0e40bab1e1d02ee702f8ca1e.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
dmss_v2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral4
Sample
dmss_v2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
dmss_v2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral6
Sample
dump.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral7
Sample
dump.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral8
Sample
dump.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral9
Sample
dynamic.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral10
Sample
dynamic.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral11
Sample
dynamic.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
714070a6972645f5ec8b990bed9755c23e9e169a0e40bab1e1d02ee702f8ca1e.apk
-
Size
6.8MB
-
MD5
aaae729f38b3e04daecd47c692d3f26c
-
SHA1
1aa33db4bef61c0f3d92feacab3213efa12eea28
-
SHA256
714070a6972645f5ec8b990bed9755c23e9e169a0e40bab1e1d02ee702f8ca1e
-
SHA512
95f15f97e63d4723f40269a328eef1e2f4803543a60a488a482e4e65b6f9fc4158b715f0f93fd77e8186963a4368638df2340bd65700e87c45764ff2b48eab41
-
SSDEEP
98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6bX:GrsOtM2uxMGwJCFFZ+/jqguPi
Malware Config
Signatures
-
Requests cell location 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.qihoo.appstore Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.qihoo.appstore -
Checks known Qemu files. 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /system/lib/libc_malloc_debug_qemu.so com.qihoo.daemon /sys/qemu_trace com.qihoo.daemon /system/bin/qemu-props com.qihoo.daemon -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.qihoo.appstore/files/sllak/opt/4965/finalcore.jar 4965 com.qihoo.appstore /data/user/0/com.qihoo.appstore/files/sllak/core/finalcore.jar 5507 com.qihoo.appstore -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.qihoo.daemon -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 3 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.qihoo.appstore Framework API call javax.crypto.Cipher.doFinal com.qihoo.daemon Framework API call javax.crypto.Cipher.doFinal com.qihoo.appstore
Processes
-
com.qihoo.appstore1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4965
-
com.qihoo.daemon1⤵
- Checks known Qemu files.
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:5009
-
com.qihoo.appstore:critical1⤵PID:5225
-
com.qihoo.appstore1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:5507
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD56da302a2e5fc0263420684f38a00e3fd
SHA19e1c35e91c3b84600dd8ebc10e072ccb91b5895a
SHA256a9b2f6227429fd83edc4db9e62c5e3f8c45b55598f7b10c3132d6b339283c8d2
SHA5126e91d3076e4f382a5e4119e6429b90bd4d604c858acb4914e8b67226f4ad0626e29726e09d12965f075ac6aebc49eb22faf0f5c6a286913aad9515887f91fa1b
-
Filesize
512B
MD5a9a3e3ba22103386f765bbe19eecf165
SHA119b5549ee86f1e962b5cbae78af7f2631dd512d5
SHA25610974adcbd8b3d2b368aeabbec4950ca6311e18ea65b0a9a7d791212b36c80c4
SHA512102165446c96558ceb6efa43af026287c43267c28394fdd37aebaacf566564ad19f39ee4a1789ad47792368bbfd7aacffbfa8704607e727823aa915c538f184f
-
Filesize
8KB
MD5ca323e26440ddcd95aa4f4ed23639c45
SHA192dc6ec12f25b8ae9c8aa10cfbd83005b9296bbb
SHA256b35c5b8073cea802bf32eafab76202237d4685f82537706ee957dec4c74102b8
SHA5120720cd4ba0f454b738758c8a6a0b20e3f02c62133a874ab2200074cd4c9e4d68b2af8a71df3a16306ae2233e303697129d1d9f9f45f0985f7b41d9aed5fa56bc
-
Filesize
4KB
MD59ef6004e438142b539c36be3c2987fdc
SHA1772049a9d9aac0fb927bb680f807939f9d47c98b
SHA256138101f15d6f1e1ea4d1a21d484155037214377e72f327730b5915ea91842970
SHA512072647d0b3551bc140ed5efbb6b29e24913ee5dcd68ad7e6eebac3f847fc0f67fcd5932b7585e7a508f5f67f8125152158f4cb3a2678602e10c16cdf6e0c5591
-
Filesize
12KB
MD5ea628e04765adaf4238a5dcdff4bbd51
SHA1a801947619ea8c368efe9c006a324dc6339ac60b
SHA256885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
-
Filesize
512B
MD59cc06b0aa9da52ab44738b60da08fc13
SHA1234bf4f0382b112bf6d028fc9a57e05140a74641
SHA2568d4f3605ca740399613adf2b94a3d4a73942c5aab4dbf267d17da2040d7c8f7c
SHA512c96cd302fd777c78498d06399f35b85bc6e096d1acc9e819ad5bbd3ddfde58681f553a358d61cb37f68e976f55eac8177bce0ec55e5ef17397bb394f7daeda57
-
Filesize
8KB
MD5e98ebbbffcf461e658892722b00aa132
SHA14d4274cea0faafa919e3681eadd4ab5f35e441ec
SHA2569efec964098681200819f0da60341342aab744889ceb6d01640d7d822fdac7a1
SHA512e97c6837a7802e7bd9e841785dd3762f8c057d3edd212c7153b2e105603b1a08fc8ca13a9a916af627864275424720ad34c4e106967e5fe48c3f4e14b89995cb
-
Filesize
8KB
MD5fb29afe91f8b1a4a9d7f4b4ff1f82780
SHA13ab0973e3ef3d4eaffc205af0114ba0c6a7e8b24
SHA2560739580f3754c19c294d2cabfa9c192594bf4e1cf84822e59e5395c97e96b8f3
SHA512a7b1a8b587fd72a38c6d3c108a512ca264e597dde47d7d75920d7f72900dbdd8f13fb6cb632dcb0e2d2a73e7ec7c63024c3de96d2e89a80080558099e8955c77
-
Filesize
12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
Filesize
8KB
MD5469666cbfd7decf0168ba6fb2a9d433a
SHA11a984d66a30e7f37fde0d04dbd294d98851a620b
SHA25609de0697f54bc498823e40ed3615cb59f9445158d05641d24b2b3c5014bb1f1d
SHA512f87681a712f0a2b0c63f3b9e07b405002f9087d25753dc9c5bc2a15ce59d5f5d17aa015df241bf74dad5fa251e4da88f6d783a480a722456fc3c7fe22de0a3cd
-
Filesize
512B
MD590879e810c7c288c0af2ed017c8dc708
SHA109bb7fe81588c97f06af6dbe0081bcdcb5443256
SHA2565e9235a96fc9cb8bccbb87f6e2edd961d894025db5a44f4366c45031824e67ae
SHA51252ce6266f76cb5db3826148ea6cb1f174f52a31c4ebbdced56038d8ef1b3c806564d538e649e45ee7067c011e64749b2e165b408016208340eb8ff65b73d35db
-
Filesize
8KB
MD596dae9d5f497010d440b574ac3f5625b
SHA1f54d656a26465f609bd5d8039d94f9ca1317c93f
SHA256fde28d4d0fc58ca9f52b694194759449ea739ac0fd2bf01afcb23a97ba5ea141
SHA51266e5241dd561d350158a667470ca004ec75eaf07654333051adc6ffb81293f6d354b320e2d400b60b49e8ff95e551068fd9b2da6a9ac530a482d4430b41b743d
-
Filesize
12KB
MD54d6c62c1bb0338082f40a5875ef35f83
SHA1186cf104f89acc4a0d5bf131f67e4f5586701f14
SHA2566c849bbb1270eb4fb26ad2b73496996853521f2ca6002ec1db4f64a421c4202b
SHA5121f03522f8f003538e64ea74367866e0bb6489a204ebaa974d720964b44f836218a58f818c680542bf0144bfedd23a5e06cfb8eab01043a664fe1178d6487c12a
-
Filesize
20KB
MD5932058c83d1f903c515b112590a35051
SHA1ee90cb29f0554168077f60ae66d458a22218824a
SHA256ec21c5db01d91ef738a7d990bcd11337bae4b475d9127eb5675657c68e881676
SHA512940b6557f623b18787bd549a84f5483da73a46429d5949f74bc7f13d0dc74dc620a40ae5489508f85463c256de5f71751c72e3852c6a722a7ade4b98ee2b072a
-
Filesize
16KB
MD50685bc716a586d0f6b849b97d0fc2d02
SHA1fb3ae859d35e4e5c86af4a045c8f7126bbd4e73a
SHA256c7f6ba4fe586c85516bbefb4e5702ce81e8b5b573f413fc5304f38f2dab69c3f
SHA51204cf6da457e89dd0061334477ee24b39925fc4bcde182692732cbf9694a81ca89bfefec38ebc56e02555630ffe8f7f0e5033168294d8d6751c6aba914617dd00
-
Filesize
512B
MD5d5210059e2110a1cb900b34f8c3202bc
SHA15c9af6031c876c17e0e6fc33758899e00bd68ba3
SHA25645acf0a9c6de5509bda7d6da20a1748200251298a680d75b35c6d2955b2ac097
SHA5129e1bd71e0145266444e04e4abc349f48638943f9f5cdb96e3c5d55fecd88ac5ec7a816f4b3965d4b9318bb2e168124e8057212db3c77dd238610b0cd7840c12b
-
Filesize
8KB
MD5da104a51c057828467dd3af4f850540f
SHA167dd41c4c81fe44a55a588d0de944d335daa5c61
SHA25696adf8089baea0ddfd5869415c29e59643987a042db3ee2ff1f31e0ae242500b
SHA512e394e9151072a14a47048bfc74cf730846289b38c9174495c5c02b8d7d296da841cab3d41f3b19c56d3d20c4c7bcebc5eec277479da3b75a18da0f64df0a085c
-
Filesize
8KB
MD568a1cdd7280ac3fa324ccf35c83cb6c6
SHA1801d5a3a3edac6499f693ccb67f027ff2f2badc8
SHA2566e5b697f0d3c32b4019d90af7383a34f5fbaa7855123657aadedafdc10aa4b38
SHA5122640dc65050a54221ff570e387b6c7f33ec133efb7753d3a9ef8493570e4c147bdf2216648bfe6e7d5517f2d810318be5f695cb44f11b7f7a4e1344c4a4233ab
-
Filesize
4KB
MD505b285c0de4df1797d3ea3b3f49f1986
SHA14e8db86e40afd6a6c3126adc696ee2fea4cf894b
SHA256864d2c2890cb2e1862c50446c358068e2cff23c054321b33f7553d54bbbafdf0
SHA51292da0672c2236a6fc31eb6232d91821debaffb6050fc37511220aa67a068d880e7c12ef038420d6803732eb4778b782f3de9e60d7237e3d8518752b8f26503ea
-
Filesize
8KB
MD5d5c5967cc938deb0537ef332010d1d23
SHA16057e715bc68dadbf990adcd7edb12a755c6f44d
SHA25640c742919c386372755e7fc9cc5c7f9dd45f0dda322ec621da87fae2c0591064
SHA512f7f247631fbf9afbd96c8257db2dd16c99d70040bf9fe7ca5dd0868d1efaacfee9d7f942a6d244dc0976195d3cc7094078c764ac65ba6d7bac7592fa1a4fe385
-
Filesize
512B
MD571f799783b2db39f069d0974c20f8d17
SHA133a72f9a8f9bf69be4cf38d940141c21cfed2b4a
SHA256a14e6046611371bde8ca2c65701248b2818871d08caf962b21290961c9f788e7
SHA51292da8ec7b5490bf3f18fef1e8692ab97277ef1e1c7766d2b528170d2ba5fdfd33bcc5292ec7ae76c80332e3b00964ff292bdef4c652b69b4ceb6e968fed9d887
-
Filesize
8KB
MD5f4aa2f7a87f75b0313aa9d12a52e7db4
SHA194aa8e011d177a18c6978d948327e5e22a3b1c4a
SHA2564e7976d4e6e1dc4327c1f3c4fb0f9b68edcc8995b8ccfd42c79c2cc193820c7a
SHA512905b6da2e4888e5bd6c17a1bdba2d38127d9911227c23348165d5eb2943c39b8e384f3829ff027ec5fe58faa85fac83f3040be51ef8320dda81cddda76dcbe1e
-
Filesize
20KB
MD563034ee19c8ac183f4be94f0e4350592
SHA18bb94ab357099476de70fa34031349c4f82c8f12
SHA256fc8213a10a4907987570701d47828767ffd9517ac55111519fb6c909b015ec7f
SHA51214f6fb8b3648f247bb1c675f5e10f0259845c7a6c559d960ad74759634c1bfc92e0f41cc4cbc973cec45395b2269c885f9dac07d926f490f505cf2a89bb93aaa
-
Filesize
512B
MD596db7b7e90dd9ed40651b3fe75a8bbb9
SHA191778d4a80e8f011170d1b76b6ae4a48870955cb
SHA25669726c6b5116dc2f3a95881e292b45a550fccba572d6fc37f7965f4bcdb8d570
SHA512b988ebefbc98be1d8e95bffdbaddf92d6fb141c51b47986269231e5ef66c442f814d6f87a89b954e65c236c734e08f0927035da05616fc88db9c5ce613d8b98b
-
Filesize
8KB
MD59d3228e601811d03dad76050eb462f74
SHA131c2c92b5923c707cb44e6c6b0e13599d457dd84
SHA2564310cd4e300e09e07da8b9f326791de0fae33f2151d952a232c0fce0ec3ee200
SHA512d1f4e653475da6b0fa12e28cd249e8ed9344aa3f4a420fa0d6d66896ced660716a8d009716ee76d5dc257c5c072c785b277844f1646a4a72eb5c3752318a46bf
-
Filesize
8KB
MD52c2e0338cd6d2fceb5dbcc84049ad31a
SHA17b16e634c808da3490fc97ccde6bf5f630f725e1
SHA256772a67d50099f0bd795a8b770942357fc15417630ea006265c0f710e2ba3a7b3
SHA5120950ce6c391903a4789a4ca045eab35137bc8e10cfddb65091d4536a407767893557e0d1e97302625c24f5626cf10fc1dea87d95bd5ba5ce504ef35cdc3c325d
-
Filesize
77KB
MD5859a418a51d67611c9c934eda4eb1f3f
SHA1c12150b888e3f0fd53b2bd9cefe4946775df6636
SHA25641cc80d8e824dfe5c5b876505ede83f1ea680297e93ea6a14e5b63dbce182e89
SHA512ad42091a63f09542c830309a725ae2a321756662eb315660cda977d0a07c876aa05e12bac957f953ebb41b5ae640d70a91cabd8db7ea48a4191295926230b38a
-
Filesize
568B
MD513454f6a1ff7d8e300f202952497cc31
SHA1da3073b58697eb4b682751dc99b3d738e1256c22
SHA2564de9466ae9664c9159bf20f1567ae7afc66bb29b53784601f3ce3bbc65691a5b
SHA5121aa95aeb027ed070817b2a274c4509130d47d0e6248ad16e774fb887e30ba765f70c0cdb6748765e91386fdedc796ca861a5d3bd4dd1f0f15e7f0aba5c9d9edd
-
Filesize
520B
MD5a60be84e95b48fe61d5bcf25ef07ef80
SHA108c914a7c7d6b7b727df117870602e95299fb50b
SHA25670025cc7f3df51a0c4fbc8ba137b0a68bfb20da692c854966b2eb836720d4c67
SHA51222dd55a565b1c01fe32aba15f448af389590465d478a51fe9837820a76b9fed7843986363ccd1505b90bc864391de5e154cef8f2e4eb7cede6a47f2d3a88eb73
-
Filesize
576B
MD50e625156d0ff583d842f5d2f72ad03ed
SHA12305c4f94762059c3a94b1b43851218a5026428e
SHA256d9b4b7ea8ae52c81fac728e73ed42004b7945de6693d5b887c59e44e1d7f2fa2
SHA5122c51b2381144b3598195d934f87ff8d1e2d5298a0f49e3569404669b4f9abff13f0ca5f02dcc3d935a02df81548eb4197d9957b01e6277290e63807a66f131f7
-
Filesize
576B
MD53de3454da0c0f3a1f333aee7f7ad1b94
SHA12f9a5abd17421a02b68d7c1d5c8b12857ff37ded
SHA256d2e569f8d3bdbbcabdc00e2be2ca3dcc1f1712a6eec5e447fe797e3df96df797
SHA512d62e0d0afc2c57a919bce91483699e82c73183687172f744f760463f3e5e4074c92820dcc759e00dd622b1fa8830cfcf0e107ff6d924e7230316d07dda8e55dc
-
Filesize
540B
MD5da95409294c665003d16e9f8dfd02724
SHA1abee798919397fc905ed49e335809e4a2fbef793
SHA256419c7c778ee375577ba99ddd9eac462266ad2e06025d1f4eb11d4ac91102fa07
SHA51260b5c8b48392112d37b9b572aae95288ce7b72cabf272d63bf8ac57d17544dcbce01ec09f13f236d424f6d92664dcbb067b1904e5ae1b9066426fd6ca1cf5f3d
-
Filesize
532B
MD5875ba6802131ccfaef98dfec596d20d3
SHA10761d0f58670a6ba6bea1f5d731a611f5aa4c220
SHA2566cf366aad0839d99d1a0378073707317d22e4ea9600ddce6911c7f5255da9607
SHA512eeed588b9c9cfbf61ea1352cdcee99bf8cdeb72a95b2041e872c739c1737e8418104d25143a5489c3e4c7dc1bf9dfdfd8b43747e0a96816c2aec6ad5a819b315
-
Filesize
20KB
MD580a6771d9de9a4125ca70d77ae39e4bb
SHA12650dbd4fc9541de6804962acf99bba2d41b8b6c
SHA256025c253d05c4774df9dcc9c1973c74b58fabd986538d7a8bfdcf96cdbaa4a217
SHA512c191271332010543587a93dda3aa2d70c2b6f3c8560f12bd4c544e2a8867d904dc1042159ed5886750eee4961060c4edb049cef6528745b4b3e8d691ddf242f0
-
Filesize
12KB
MD5dbfbd1d4011bfe5450cd5c6d92e5a729
SHA1da6e2cecf02bddf73e1d7b9807f4cd40832938f2
SHA256e866f2e4dba586614e5c5dac55749d3c1bf54f44359b6b8f1085b71d170df58e
SHA512ba0f2c3d61e3bebdffd316565e098bc3e09d63f747c7a443f39d528d639b1510b565b7ccea3db000758d2a25bbd153a9a7c6aedba85af3b1f340a05bf8093b40
-
Filesize
77KB
MD5c14c8a2f5d3a7c47eb2ca8c1b6e69adb
SHA14e57b3c0f34427aba8a5be40c2e9b627172a89c8
SHA2567d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107
SHA5122be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4
-
Filesize
94KB
MD5f0221c715fc8d8768b1857d85e6b9581
SHA148f90692e3fa0e2c9e51c90b6011114e0fdfd51b
SHA256ee56d245a73db00ff247934eae65365fb160477b2fafc0a84ed7e96f4685b9ce
SHA512445b22ff4897f5814189591f138d4cddf7543d14f8a01230d989ab65ad41ee86303547e77579ab11c3e8a895785c4169b75af8306406c426ce8bffa69cf9515c
-
Filesize
176KB
MD5b667ca71e42bbeb899566c8834ed085e
SHA1053a3f889e326efdfa0d3ae7e5b2655f0b7376d2
SHA256536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef
SHA51252255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2
-
Filesize
83B
MD597eb47e06c6d1055b6637863a1c865c2
SHA1923895febcb8010ff0e5ea10584c8e0400c38ae8
SHA25640ef8e5af364e060577967e60a5a1a65af28eb9ff5f100c5be5bf24debf2e7cc
SHA512d9b7de28f5653bc83aea3ddc941b8bee8d6646802122ce98578059859f732237b0cc06bbefc5e718aea049f6d8ed6f90391a3963cb1b93ee4f457706471d18b5