Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
68984a8c190...02.apk
android-9-x86
78984a8c190...02.apk
android-11-x64
8dmss_v2.apk
android-9-x86
dmss_v2.apk
android-10-x64
dmss_v2.apk
android-11-x64
dump.apk
android-9-x86
1dump.apk
android-10-x64
1dump.apk
android-11-x64
1dynamic.apk
android-9-x86
dynamic.apk
android-10-x64
dynamic.apk
android-11-x64
Analysis
-
max time kernel
2645059s -
max time network
170s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23/12/2023, 20:25
Static task
static1
Behavioral task
behavioral1
Sample
8984a8c1909405a0bee9cbd88c8312c793f37d03b8c7bdb858d8907d6856a202.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
8984a8c1909405a0bee9cbd88c8312c793f37d03b8c7bdb858d8907d6856a202.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
dmss_v2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral4
Sample
dmss_v2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
dmss_v2.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral6
Sample
dump.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral7
Sample
dump.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral8
Sample
dump.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral9
Sample
dynamic.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral10
Sample
dynamic.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral11
Sample
dynamic.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
8984a8c1909405a0bee9cbd88c8312c793f37d03b8c7bdb858d8907d6856a202.apk
-
Size
6.8MB
-
MD5
5dc57f93391b16b5d3a47ce9411b8c61
-
SHA1
ddac65bf5fc2fb3dfc0b5b31b77bdc7457686f8c
-
SHA256
8984a8c1909405a0bee9cbd88c8312c793f37d03b8c7bdb858d8907d6856a202
-
SHA512
c67cbd4fe634bc1cb950976d9145487b6fbc6dbe46ce5ea1c078fbbb1ae3c864d42dacdc5fe28d275908c769098dd9ad8a4731bacbf2c21d4b55249527a6d5d9
-
SSDEEP
98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6bv:GrsOtM2uxMGwJCFFZ+/jqguP6
Malware Config
Signatures
-
Requests cell location 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.qihoo.appstore Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.qihoo.appstore -
Checks known Qemu files. 6 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /system/lib/libc_malloc_debug_qemu.so com.qihoo.daemon /sys/qemu_trace com.qihoo.daemon /system/bin/qemu-props com.qihoo.daemon /system/lib/libc_malloc_debug_qemu.so com.qihoo.appstore /sys/qemu_trace com.qihoo.appstore /system/bin/qemu-props com.qihoo.appstore -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.qihoo.appstore/files/sllak/opt/4516/finalcore.jar 4516 com.qihoo.appstore -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.qihoo.daemon -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.qihoo.appstore Framework API call javax.crypto.Cipher.doFinal com.qihoo.daemon
Processes
-
com.qihoo.appstore1⤵
- Requests cell location
- Checks known Qemu files.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4516
-
com.qihoo.daemon1⤵
- Checks known Qemu files.
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4556
-
com.qihoo.appstore:critical1⤵PID:4732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD5e1dc7ce3693c804e7316fcf37d7c1ebd
SHA190afca24df04c175c62ca61f4e041721f491e38c
SHA2565e0559747a018e016c578ea2cca18c69107b01253f45a3c07635d04cc2e3f77f
SHA5122454a68cf76a0f2351dc9e9569293ab0a72d6c77a9fc8ea7ad0100ce5df77738ab072260d2d9d25ce8a3fe48ab4a426825af300d4c6e9001ecac024af997ad1d
-
Filesize
8KB
MD5d7d232552f567d4a6944a818f7d82339
SHA1a0c36e2bee4439464f8ce2a0d10ba71e99a6feaf
SHA256bf1ef14a72ece52ed14cd413074c340e2b958beb1a0658cb96caae2e6f4c468c
SHA5121f4f9b16f49a9f1f816e1ecdf20d3d37f4d5fbe0f811b29fb6cd641ae7c591c0a9a011b94e382f8ca35645e4541b7362027ea7d5e8013f7c5ec4b7d86089ce8c
-
Filesize
4KB
MD5f2e21465245370ca024c6e8842289134
SHA153d397cff207261915d7ff328633cd78eac36afa
SHA256cef38361815235b244ab363ef3c61a93aec3560b5c13a1172b5c4a7077d0e431
SHA5126e28ba05530262a3bae0afca96b10a67cf169fe8b97ba58fa743ebc271facb7a0f1f96f388d8e0b89d2ca2ba5c06f7520b946743049cd9c394b152116f4af5cb
-
Filesize
12KB
MD52e8d2b7e3b1a8758ee427d301314b7ef
SHA132bcf7c03fd4934e1224feaf2114df2ae56d0551
SHA25667b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d
SHA5122a7acd5dff858b159ad5ddd05f8392dda9a0d2185dd5b2b4b20ab660d8946bd3686cdaaaeff7317d717a23a2da1d86e5e42e0221e20e55cc020a2d9a16b0869f
-
Filesize
512B
MD5146f1b81845d63f9d554a0b3a044efa5
SHA1d8ece1f7fe82b16e4dd183b612b793f46d3feb73
SHA256894ea4f055736839961408ddf268cd9961f5d82fc9dbf2dbbdb0f60b62941c75
SHA5126eed46348220932f3b72d0cc4539e2de358d8c9453cb63372fb46a47d27a93db0476d065673fee431b5733a3adf6d1287a16e97f825a4f7a31a84a7b3495d656
-
Filesize
8KB
MD5d57a7457d8cdf68f9c8db0fd341deb52
SHA1212b34319fff6acd142e19029ef43cba7883bc53
SHA256ac436137886e41bdd3c2a1f1e58ae1d426b7284ecfb9cfe39eef75f4a406ac54
SHA5121d930844f957815f3e7998dc44e4a2a1673d19ff63a097ce0fe4a123465315d4db4bb331c2e8cbf23a4c8a72eaaab97a79d59b58edd22a3031282793be2cd9c2
-
Filesize
4KB
MD53adf4eacf1df8bce9fdc8f9d6485c68b
SHA1066a0c8b57f6bbf96ce3bb606759103c74b2ea6d
SHA25651794a0bf9b2ba71713b081ca60e453dee7baf8936c858684a80c780f150d73c
SHA512f94dd226ce75d42d88dea555f7f4dea9b27871c4fa30db71f6cf8ce3c120f97cfe695d5e7c9652d93df4751abbd42e67116224c34568ceff5848d6ec01db9519
-
Filesize
28KB
MD5223b095c5100b3f36d13f2922801d6b5
SHA1247df4a9847dcfa7a42b649bda66126412c279ff
SHA256dc0c24c777a762b585f1f5213b8c021d30be608bb38d823271d9eea42d60f5b5
SHA5123edff39a607c3309e4f2a921d6ae1b3fc1b8e7328d57c2e6b9a4e9825cb1d9487a16cbb4b0147cc1707fac8249253b687524e18f2184ed86a457729e9f5d9494
-
Filesize
512B
MD5fcfc4a4c8c58cf5bdfff1e4c269bb154
SHA12d946e58743d82d713b44b061f926101c2067093
SHA25639e6b4440fc60774e4e8dd924ff2934244e7ad55ee092f64cc8e9722d8dfc333
SHA51213d67b6991a14141462f28d2d5314e8bf9f1343a06f9d8961a04cd71c0eb428d44d3f2a62a43919785df76f35be75f1f4c14b32363eb9ce4482ca777d9903300
-
Filesize
8KB
MD5f43518463caa5f7e97172bed115899e9
SHA19cd263b7c4ea11a57bcf1373f28f681ddb46c3ef
SHA2565424596aaa0af7f250e8977a347a395b5cf3ef6e97ee9b3c6c96de80e5f2bf75
SHA5126cb516414b089cdc91565b14380ab4a276bab0bc86b9282492a1a480037cf25198ffef43b6823d1e84976b241286e83f9bec90c5c190d89bf57460c94b311e07
-
Filesize
8KB
MD5b6aeb61be4a061c9363e6d8f3654985e
SHA184613db9730afc6ffbef8e748744de801cd38698
SHA256e8ab5330021bcd589889ac46c77c68785f99172512fedd11622bd56d9ce79c0b
SHA5124921fd2783f0e25d7b659cc8f3a56f791b27d80746c17a8f46bc8952876e5bdd1819f1354b10947dafea580756533c72f4c602fa7fad8c27a62dc5e195f561b0
-
Filesize
12KB
MD5171aedf968e17a2744d2585715606cb9
SHA1bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA51278a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
-
Filesize
512B
MD56a8596911240a58c858028d3d4e43e25
SHA108f804fd8823e55c56c080fa930d45c72848287b
SHA256c2583fb9ad01a73adadc12bb2ad13db947b67448e03afb6fe4747adcc696ca58
SHA512b23ed79b4901c241cf34f8c406b170e5497ffe2cd74e5f12ed6a39fa88245d7842c2db6f8b348efa7e677121a76456edb110879e843e2283565db4a867a5c999
-
Filesize
8KB
MD52187d5bb7708a0b6cbe9fcae7a42bcfb
SHA1c6b69b605d1f4bdb190a91b49ec29a455cf4c040
SHA256025e06026e341e6349dd4896b212fab1ca16a7ffe3601dbcc69cdf6681d623ef
SHA5128cd110713d5b40ed61cc7795ec76f9ae834db47113f2a8ef7e3ac9056c1d9dd468845f26d3b9931d5a085c1ae437c60395d85b407cc925a6b5f8cb548355e42d
-
Filesize
8KB
MD58611f69443149415625d0c02e31bd4ea
SHA12c153682bf292438d705b8f75a0929c68bd59f73
SHA256607c347d49c83e5f6b053d1ca2d12fc255ad61c901302cc88b9188724f0a9812
SHA5120ab8959639d2094a45b332566749c66dbcf058a147272b1250cbbf36f56b123b72f8874584557d4b2f72de92fb72db0a24fe9131f5af04987d67ef2c2935e76f
-
Filesize
20KB
MD560bc6c2badd85474a357f9ba27704afa
SHA138a012950405a78659c10f386892d81cc8742265
SHA2562be19a6dcf3cc68fcf46bd3d151a1afc013eda100fa2f399017be19d79c314f4
SHA5127ec6ae92b4d817f7590fccf1e3945aa99b74dacaa6c377e8c46d4c8ee21b5fa33ee97861328004fa5d4223fc5b1e606889934cf6503922693239d7ce077a8d05
-
Filesize
512B
MD576163170ee5477b3a39cae829ed21efa
SHA143ac1ba2af0f2f7fe51bdef88e9f98e4d8239046
SHA2561edb4fc3cf4a82155989daa9d4d158177204bc5cab347a9dc7758b5139e0e764
SHA512fb5d6bf71462b74d36c98a3bc03a1391bd24a61485df6221d011328b86a36001416451e82ddfef4d8ef38bd39ccd000d5bee3e34dd8f26b2d9dd9ef4dcb06c79
-
Filesize
8KB
MD538c112136ad9e15fc6436ebf42e0a9b5
SHA1d1ff8db255b8745b807fae550df0ff8ea9f2c73b
SHA256051419151f19f86e777f2babc01d7c59423aa25dfc4e8fa8e311d3050093018b
SHA512894912105ce3e831fd066b3aa417aa4e70665b54e22c014164ba3ba2c6f8918c7ab04687ade8221cc632be1af0305c7f95495df7feb6c46811ffd8a8e3ed9891
-
Filesize
8KB
MD596be7823d75a5c33b0652df8dd0084a7
SHA1d6ac46cbb163ba7c9b7161e1779e5717dc5403c0
SHA2567f812c5956a104c158c0c454600de42e0b9c3dbd7bfb5dacfcf1baa50e5906cc
SHA51298cf978bd1de5d06bc1021a60fe0e3d0db31b51185f1cda7cb56bd63d8d11a7ecde91e680f8003db47df8dd66e30b9b86bee85ff78f99cc40d1c0f341e7662d8
-
Filesize
12KB
MD53cd9e0f51794ba56c6b658620c4a776e
SHA11a4c8b4baebf348297d3ffad7dc164208c50243d
SHA256501b7371cfad19d926f53de991d54259fa0674618efcf344ccb0f2787d9a21b7
SHA51236191d3e6b6a1cc90a5bb8cb49eb4269a563fad34c1f523ebb3eecdc98b4783e067296beee01959b46188621c2ba5732ead240c70daecc52fb3bf577e6e4d6fd
-
Filesize
512B
MD556bf040e1202d2eb9f321b0ec11b79c6
SHA18cd516017617f41c4da2c7ab620ef50db4712578
SHA25674b8468e7e969e3c3b876e6476feb8eccd27e1743bfad4bea1b68f8345738d7f
SHA512a745aa6794cafda35e96d18095e8f4692b36a3f79133c51b33e2ba4548e936f67bf9565387d5307377032e8f38e21ade2e56d3561bab57d6b6d423eb24c82762
-
Filesize
8KB
MD53a062a5d45826610a6abd728a98730ec
SHA173ca43669dd3bf1c02b0a546cfdd7cb4fd59f05a
SHA256ed91f2a6e8adf31c466ed25a9e003f01931c83d3e0d63e6105ae20aca7dc0497
SHA512bc7df4da3ca4713a4f68193a25be17de026e288d1048ed08fdeb7be8a8c4dc48ab91f3b5b1e4f38bee43f29ba29bb6d4d91c106f120cf67dee1d046ba120abd0
-
Filesize
77KB
MD51604a0dfe86e0d07ee38bd9d50a62c9e
SHA1b8008f2dec3a136498d226840ba43860635d9b83
SHA25683bac73c7cda6ad1cfde4840d8df8892317f53482271f31bf98cc3a3cdf7215d
SHA5121347560d2d973c91973fb8127bb4edc2eb8bfa262cf2bace4177bf1f0999ad0c159b51673fff1c996c6549d27736a9c6e0b38815c69ec9f10022f13f9714128d
-
Filesize
512B
MD509a3997a8f683a19367d0b3042760f33
SHA1bf88899ad561706a0e18dd138d417e54c63635aa
SHA256182459298cd6d615fca5ec56d44a2eeebe327ae7899b1e3ba6bab90d2a96ffef
SHA512728ffbb398d896b6ff068698675138e5663c4cbe7a9c8b2dcf9b57276a2054bfac2e82f8035ac284b35abbcdefdfcca03b87286f79b03458f779048297cb0904
-
Filesize
520B
MD5ef88e3bf7d9132cb6f88f9f6d9faaa33
SHA143129ed5aa17ad7db22ce5162e0d743412393953
SHA2561267bc987597306d05c22d34cc804e92a4ccaccbc5362433fedf365882e428f4
SHA512c918f6809cf8929c8b26d9697d4899f67cd99850eebaf340737fe418218e62d0378af3b02b7131358300e7bb2ca3e465272494f5fd0f77e3375599c851e161b3
-
Filesize
540B
MD52e98dbdaddbbb22b35b3d1ee12e599e1
SHA1aa1ef64e1f4600d5f94bb8fd308eb6a68e836d9f
SHA25676b342b838a75c1e5b3c32322fad9d2432cd755cf11ec61e6389079b4029a15b
SHA512d3241f7f5a914a2f652893d597804a9003ddfe563450d311af6b0a9cc1ca5c911e671650af8e2452a0f7dac0462df669ddf20876f1898adfba54216f0e44077f
-
Filesize
1005B
MD58873e486e96b4d7e80903fa141cc764f
SHA108d8f3626f898038cda58965a1399ce9be0188ce
SHA256a5a72fec4018f996f48b75d4f3a97aba7f83ec580e1ea82d0ae8b1ee48bdf297
SHA512e89243ca02911540553d719aeae4d52bae214214fed70856fb14e969613bbca91cdfa6d2e84678384ed983f3150fa0e5a9443b5dc4dd5022c2b5b80905a731a7
-
Filesize
1KB
MD506c414e7734dccc76dee4ab9dab1dafe
SHA13735234813e21d4c9ccebeda02b6b4a2978f11d3
SHA2569f6ba133f312404d106069710f89b7e82559558d0b75d7c7dc7a9ea26f0740c4
SHA512adb13bfa5e0c16c85798f178ec6e152886d70d1ce6acaf09c3e5e534524fdc6b705157eb9a2623643376a3fce51a3cf1da4e9c795fdd0fb1d87f9f9febc565d3
-
Filesize
1KB
MD5d4b2114eb4b7032049805e74e2d30394
SHA13a3621ac6628636a377585789135be95ec52ca9f
SHA2567a1f9783f7051be8b4a73b7dead6c7c998f53bf975f2912ece8b99af46313cfa
SHA512c671f7069f6b317688b278604c9bb30d3a2e89cd33ef74f5fe0b1c0bfb2a7140e0599812dc92d557054953545271d5932a70345e590f31a0736f537fea0673a8
-
Filesize
20KB
MD5232e5bd469375181e66daa7b53a36dad
SHA15513a5faea82dd3bc9afa3c0ef2aae4d8cd110dd
SHA2562034a7a983d6ef13a58d088dd227544ba765f2ccc288c46e1d135bb905b9a14e
SHA512da23e6eed9006a06c9439ea52cb1f6ea67591418d50c27d834d5fbc04b5f49da3db52c446ec9b353887d818bcbeb5ada096b8f750a7f95beb976629fabc536a7
-
Filesize
2KB
MD518ba0a08d5d0a77acf5330439609d4c5
SHA15b7629a207012eca70d08db0b49d364b45058166
SHA25692dec318fb3c7d83aeadf90266c2cf06b47d44d493595333245d48b71954fbda
SHA5122e06a2d2de3f8608f901c239ee1c4b23c5100986b9dc480bbbbe35d689fea6e061ef95ec8b82fb051068e1ecdc24b73c9a09f2b9e5aeef1d9a28e135d1000de0
-
Filesize
596B
MD57199e663d5247fc350f54b85a56e5d56
SHA10b02a3059add94a0617ee9836a070791e09c5c37
SHA2566d4710d71342c7adb7807fa56afaa379ee5c0ccd75bf0e373f8dd4913a2b323c
SHA5128ccb0e81648e30bd25364bf08b2536dd5463a55505c20d1e83596f7ab976bc5147504344db10c8bf3bb31a346c319895fa458998603495e0e4793194befdfc73
-
Filesize
77KB
MD5c14c8a2f5d3a7c47eb2ca8c1b6e69adb
SHA14e57b3c0f34427aba8a5be40c2e9b627172a89c8
SHA2567d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107
SHA5122be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4
-
Filesize
176KB
MD5b667ca71e42bbeb899566c8834ed085e
SHA1053a3f889e326efdfa0d3ae7e5b2655f0b7376d2
SHA256536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef
SHA51252255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2
-
Filesize
556B
MD5aca09954cad31635e967fa7ea4ad0b84
SHA1679dee2790896d338557bf9dc77b5dd327c8fcc1
SHA256360e0d42bdb9984e0a57d67d7c5835e421756bb80a8a2201ee5c326f88f75c10
SHA51293ec6dd424b9194b9da18c346ee46939697f4d259cc2479d9c72f42aa297e660d4b5fd56d30ab6523e6f5f41bf840653b1bdcf3ae638c5a4635eb549fe329384
-
Filesize
83B
MD538ce979056b00a8f7887038cdf094f56
SHA15fe4d95672d1bb05b3d817a4ade4368d9f77e12a
SHA256630272ec76772fc4a989cb5cdac1583889d7bcfc6edf707731a8804e6c6e608c
SHA512ffd93d484ab6d02a7667d78f77e8214ad947c783a2518606cce6fda932438a28f73f6dae7bbf9df871c7e34b7fa4d437465dc891a40c56b7dd3d2ccf5d1e1d0b