Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2645059s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 20:25

General

  • Target

    8984a8c1909405a0bee9cbd88c8312c793f37d03b8c7bdb858d8907d6856a202.apk

  • Size

    6.8MB

  • MD5

    5dc57f93391b16b5d3a47ce9411b8c61

  • SHA1

    ddac65bf5fc2fb3dfc0b5b31b77bdc7457686f8c

  • SHA256

    8984a8c1909405a0bee9cbd88c8312c793f37d03b8c7bdb858d8907d6856a202

  • SHA512

    c67cbd4fe634bc1cb950976d9145487b6fbc6dbe46ce5ea1c078fbbb1ae3c864d42dacdc5fe28d275908c769098dd9ad8a4731bacbf2c21d4b55249527a6d5d9

  • SSDEEP

    98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6bv:GrsOtM2uxMGwJCFFZ+/jqguP6

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks known Qemu files. 6 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.qihoo.appstore
    1⤵
    • Requests cell location
    • Checks known Qemu files.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4516
  • com.qihoo.daemon
    1⤵
    • Checks known Qemu files.
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4556
  • com.qihoo.appstore:critical
    1⤵
      PID:4732

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

      Filesize

      512B

      MD5

      e1dc7ce3693c804e7316fcf37d7c1ebd

      SHA1

      90afca24df04c175c62ca61f4e041721f491e38c

      SHA256

      5e0559747a018e016c578ea2cca18c69107b01253f45a3c07635d04cc2e3f77f

      SHA512

      2454a68cf76a0f2351dc9e9569293ab0a72d6c77a9fc8ea7ad0100ce5df77738ab072260d2d9d25ce8a3fe48ab4a426825af300d4c6e9001ecac024af997ad1d

    • /data/user/0/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

      Filesize

      8KB

      MD5

      d7d232552f567d4a6944a818f7d82339

      SHA1

      a0c36e2bee4439464f8ce2a0d10ba71e99a6feaf

      SHA256

      bf1ef14a72ece52ed14cd413074c340e2b958beb1a0658cb96caae2e6f4c468c

      SHA512

      1f4f9b16f49a9f1f816e1ecdf20d3d37f4d5fbe0f811b29fb6cd641ae7c591c0a9a011b94e382f8ca35645e4541b7362027ea7d5e8013f7c5ec4b7d86089ce8c

    • /data/user/0/com.qihoo.appstore/databases/360appstoreInstallHistory.db-journal

      Filesize

      4KB

      MD5

      f2e21465245370ca024c6e8842289134

      SHA1

      53d397cff207261915d7ff328633cd78eac36afa

      SHA256

      cef38361815235b244ab363ef3c61a93aec3560b5c13a1172b5c4a7077d0e431

      SHA512

      6e28ba05530262a3bae0afca96b10a67cf169fe8b97ba58fa743ebc271facb7a0f1f96f388d8e0b89d2ca2ba5c06f7520b946743049cd9c394b152116f4af5cb

    • /data/user/0/com.qihoo.appstore/databases/_ire

      Filesize

      12KB

      MD5

      2e8d2b7e3b1a8758ee427d301314b7ef

      SHA1

      32bcf7c03fd4934e1224feaf2114df2ae56d0551

      SHA256

      67b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d

      SHA512

      2a7acd5dff858b159ad5ddd05f8392dda9a0d2185dd5b2b4b20ab660d8946bd3686cdaaaeff7317d717a23a2da1d86e5e42e0221e20e55cc020a2d9a16b0869f

    • /data/user/0/com.qihoo.appstore/databases/_ire-journal

      Filesize

      512B

      MD5

      146f1b81845d63f9d554a0b3a044efa5

      SHA1

      d8ece1f7fe82b16e4dd183b612b793f46d3feb73

      SHA256

      894ea4f055736839961408ddf268cd9961f5d82fc9dbf2dbbdb0f60b62941c75

      SHA512

      6eed46348220932f3b72d0cc4539e2de358d8c9453cb63372fb46a47d27a93db0476d065673fee431b5733a3adf6d1287a16e97f825a4f7a31a84a7b3495d656

    • /data/user/0/com.qihoo.appstore/databases/_ire-journal

      Filesize

      8KB

      MD5

      d57a7457d8cdf68f9c8db0fd341deb52

      SHA1

      212b34319fff6acd142e19029ef43cba7883bc53

      SHA256

      ac436137886e41bdd3c2a1f1e58ae1d426b7284ecfb9cfe39eef75f4a406ac54

      SHA512

      1d930844f957815f3e7998dc44e4a2a1673d19ff63a097ce0fe4a123465315d4db4bb331c2e8cbf23a4c8a72eaaab97a79d59b58edd22a3031282793be2cd9c2

    • /data/user/0/com.qihoo.appstore/databases/_ire-journal

      Filesize

      4KB

      MD5

      3adf4eacf1df8bce9fdc8f9d6485c68b

      SHA1

      066a0c8b57f6bbf96ce3bb606759103c74b2ea6d

      SHA256

      51794a0bf9b2ba71713b081ca60e453dee7baf8936c858684a80c780f150d73c

      SHA512

      f94dd226ce75d42d88dea555f7f4dea9b27871c4fa30db71f6cf8ce3c120f97cfe695d5e7c9652d93df4751abbd42e67116224c34568ceff5848d6ec01db9519

    • /data/user/0/com.qihoo.appstore/databases/account.db

      Filesize

      28KB

      MD5

      223b095c5100b3f36d13f2922801d6b5

      SHA1

      247df4a9847dcfa7a42b649bda66126412c279ff

      SHA256

      dc0c24c777a762b585f1f5213b8c021d30be608bb38d823271d9eea42d60f5b5

      SHA512

      3edff39a607c3309e4f2a921d6ae1b3fc1b8e7328d57c2e6b9a4e9825cb1d9487a16cbb4b0147cc1707fac8249253b687524e18f2184ed86a457729e9f5d9494

    • /data/user/0/com.qihoo.appstore/databases/account.db-journal

      Filesize

      512B

      MD5

      fcfc4a4c8c58cf5bdfff1e4c269bb154

      SHA1

      2d946e58743d82d713b44b061f926101c2067093

      SHA256

      39e6b4440fc60774e4e8dd924ff2934244e7ad55ee092f64cc8e9722d8dfc333

      SHA512

      13d67b6991a14141462f28d2d5314e8bf9f1343a06f9d8961a04cd71c0eb428d44d3f2a62a43919785df76f35be75f1f4c14b32363eb9ce4482ca777d9903300

    • /data/user/0/com.qihoo.appstore/databases/account.db-journal

      Filesize

      8KB

      MD5

      f43518463caa5f7e97172bed115899e9

      SHA1

      9cd263b7c4ea11a57bcf1373f28f681ddb46c3ef

      SHA256

      5424596aaa0af7f250e8977a347a395b5cf3ef6e97ee9b3c6c96de80e5f2bf75

      SHA512

      6cb516414b089cdc91565b14380ab4a276bab0bc86b9282492a1a480037cf25198ffef43b6823d1e84976b241286e83f9bec90c5c190d89bf57460c94b311e07

    • /data/user/0/com.qihoo.appstore/databases/account.db-journal

      Filesize

      8KB

      MD5

      b6aeb61be4a061c9363e6d8f3654985e

      SHA1

      84613db9730afc6ffbef8e748744de801cd38698

      SHA256

      e8ab5330021bcd589889ac46c77c68785f99172512fedd11622bd56d9ce79c0b

      SHA512

      4921fd2783f0e25d7b659cc8f3a56f791b27d80746c17a8f46bc8952876e5bdd1819f1354b10947dafea580756533c72f4c602fa7fad8c27a62dc5e195f561b0

    • /data/user/0/com.qihoo.appstore/databases/download5.db

      Filesize

      12KB

      MD5

      171aedf968e17a2744d2585715606cb9

      SHA1

      bbeddeb3b89fcf809619c35b4a318a80e7d5b029

      SHA256

      d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

      SHA512

      78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

    • /data/user/0/com.qihoo.appstore/databases/download5.db-journal

      Filesize

      512B

      MD5

      6a8596911240a58c858028d3d4e43e25

      SHA1

      08f804fd8823e55c56c080fa930d45c72848287b

      SHA256

      c2583fb9ad01a73adadc12bb2ad13db947b67448e03afb6fe4747adcc696ca58

      SHA512

      b23ed79b4901c241cf34f8c406b170e5497ffe2cd74e5f12ed6a39fa88245d7842c2db6f8b348efa7e677121a76456edb110879e843e2283565db4a867a5c999

    • /data/user/0/com.qihoo.appstore/databases/download5.db-journal

      Filesize

      8KB

      MD5

      2187d5bb7708a0b6cbe9fcae7a42bcfb

      SHA1

      c6b69b605d1f4bdb190a91b49ec29a455cf4c040

      SHA256

      025e06026e341e6349dd4896b212fab1ca16a7ffe3601dbcc69cdf6681d623ef

      SHA512

      8cd110713d5b40ed61cc7795ec76f9ae834db47113f2a8ef7e3ac9056c1d9dd468845f26d3b9931d5a085c1ae437c60395d85b407cc925a6b5f8cb548355e42d

    • /data/user/0/com.qihoo.appstore/databases/download5.db-journal

      Filesize

      8KB

      MD5

      8611f69443149415625d0c02e31bd4ea

      SHA1

      2c153682bf292438d705b8f75a0929c68bd59f73

      SHA256

      607c347d49c83e5f6b053d1ca2d12fc255ad61c901302cc88b9188724f0a9812

      SHA512

      0ab8959639d2094a45b332566749c66dbcf058a147272b1250cbbf36f56b123b72f8874584557d4b2f72de92fb72db0a24fe9131f5af04987d67ef2c2935e76f

    • /data/user/0/com.qihoo.appstore/databases/filelist.db

      Filesize

      20KB

      MD5

      60bc6c2badd85474a357f9ba27704afa

      SHA1

      38a012950405a78659c10f386892d81cc8742265

      SHA256

      2be19a6dcf3cc68fcf46bd3d151a1afc013eda100fa2f399017be19d79c314f4

      SHA512

      7ec6ae92b4d817f7590fccf1e3945aa99b74dacaa6c377e8c46d4c8ee21b5fa33ee97861328004fa5d4223fc5b1e606889934cf6503922693239d7ce077a8d05

    • /data/user/0/com.qihoo.appstore/databases/filelist.db-journal

      Filesize

      512B

      MD5

      76163170ee5477b3a39cae829ed21efa

      SHA1

      43ac1ba2af0f2f7fe51bdef88e9f98e4d8239046

      SHA256

      1edb4fc3cf4a82155989daa9d4d158177204bc5cab347a9dc7758b5139e0e764

      SHA512

      fb5d6bf71462b74d36c98a3bc03a1391bd24a61485df6221d011328b86a36001416451e82ddfef4d8ef38bd39ccd000d5bee3e34dd8f26b2d9dd9ef4dcb06c79

    • /data/user/0/com.qihoo.appstore/databases/filelist.db-journal

      Filesize

      8KB

      MD5

      38c112136ad9e15fc6436ebf42e0a9b5

      SHA1

      d1ff8db255b8745b807fae550df0ff8ea9f2c73b

      SHA256

      051419151f19f86e777f2babc01d7c59423aa25dfc4e8fa8e311d3050093018b

      SHA512

      894912105ce3e831fd066b3aa417aa4e70665b54e22c014164ba3ba2c6f8918c7ab04687ade8221cc632be1af0305c7f95495df7feb6c46811ffd8a8e3ed9891

    • /data/user/0/com.qihoo.appstore/databases/filelist.db-journal

      Filesize

      8KB

      MD5

      96be7823d75a5c33b0652df8dd0084a7

      SHA1

      d6ac46cbb163ba7c9b7161e1779e5717dc5403c0

      SHA256

      7f812c5956a104c158c0c454600de42e0b9c3dbd7bfb5dacfcf1baa50e5906cc

      SHA512

      98cf978bd1de5d06bc1021a60fe0e3d0db31b51185f1cda7cb56bd63d8d11a7ecde91e680f8003db47df8dd66e30b9b86bee85ff78f99cc40d1c0f341e7662d8

    • /data/user/0/com.qihoo.appstore/databases/new_downloads.db

      Filesize

      12KB

      MD5

      3cd9e0f51794ba56c6b658620c4a776e

      SHA1

      1a4c8b4baebf348297d3ffad7dc164208c50243d

      SHA256

      501b7371cfad19d926f53de991d54259fa0674618efcf344ccb0f2787d9a21b7

      SHA512

      36191d3e6b6a1cc90a5bb8cb49eb4269a563fad34c1f523ebb3eecdc98b4783e067296beee01959b46188621c2ba5732ead240c70daecc52fb3bf577e6e4d6fd

    • /data/user/0/com.qihoo.appstore/databases/new_downloads.db-journal

      Filesize

      512B

      MD5

      56bf040e1202d2eb9f321b0ec11b79c6

      SHA1

      8cd516017617f41c4da2c7ab620ef50db4712578

      SHA256

      74b8468e7e969e3c3b876e6476feb8eccd27e1743bfad4bea1b68f8345738d7f

      SHA512

      a745aa6794cafda35e96d18095e8f4692b36a3f79133c51b33e2ba4548e936f67bf9565387d5307377032e8f38e21ade2e56d3561bab57d6b6d423eb24c82762

    • /data/user/0/com.qihoo.appstore/databases/new_downloads.db-journal

      Filesize

      8KB

      MD5

      3a062a5d45826610a6abd728a98730ec

      SHA1

      73ca43669dd3bf1c02b0a546cfdd7cb4fd59f05a

      SHA256

      ed91f2a6e8adf31c466ed25a9e003f01931c83d3e0d63e6105ae20aca7dc0497

      SHA512

      bc7df4da3ca4713a4f68193a25be17de026e288d1048ed08fdeb7be8a8c4dc48ab91f3b5b1e4f38bee43f29ba29bb6d4d91c106f120cf67dee1d046ba120abd0

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/backup/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      77KB

      MD5

      1604a0dfe86e0d07ee38bd9d50a62c9e

      SHA1

      b8008f2dec3a136498d226840ba43860635d9b83

      SHA256

      83bac73c7cda6ad1cfde4840d8df8892317f53482271f31bf98cc3a3cdf7215d

      SHA512

      1347560d2d973c91973fb8127bb4edc2eb8bfa262cf2bace4177bf1f0999ad0c159b51673fff1c996c6549d27736a9c6e0b38815c69ec9f10022f13f9714128d

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      512B

      MD5

      09a3997a8f683a19367d0b3042760f33

      SHA1

      bf88899ad561706a0e18dd138d417e54c63635aa

      SHA256

      182459298cd6d615fca5ec56d44a2eeebe327ae7899b1e3ba6bab90d2a96ffef

      SHA512

      728ffbb398d896b6ff068698675138e5663c4cbe7a9c8b2dcf9b57276a2054bfac2e82f8035ac284b35abbcdefdfcca03b87286f79b03458f779048297cb0904

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      520B

      MD5

      ef88e3bf7d9132cb6f88f9f6d9faaa33

      SHA1

      43129ed5aa17ad7db22ce5162e0d743412393953

      SHA256

      1267bc987597306d05c22d34cc804e92a4ccaccbc5362433fedf365882e428f4

      SHA512

      c918f6809cf8929c8b26d9697d4899f67cd99850eebaf340737fe418218e62d0378af3b02b7131358300e7bb2ca3e465272494f5fd0f77e3375599c851e161b3

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      540B

      MD5

      2e98dbdaddbbb22b35b3d1ee12e599e1

      SHA1

      aa1ef64e1f4600d5f94bb8fd308eb6a68e836d9f

      SHA256

      76b342b838a75c1e5b3c32322fad9d2432cd755cf11ec61e6389079b4029a15b

      SHA512

      d3241f7f5a914a2f652893d597804a9003ddfe563450d311af6b0a9cc1ca5c911e671650af8e2452a0f7dac0462df669ddf20876f1898adfba54216f0e44077f

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      1005B

      MD5

      8873e486e96b4d7e80903fa141cc764f

      SHA1

      08d8f3626f898038cda58965a1399ce9be0188ce

      SHA256

      a5a72fec4018f996f48b75d4f3a97aba7f83ec580e1ea82d0ae8b1ee48bdf297

      SHA512

      e89243ca02911540553d719aeae4d52bae214214fed70856fb14e969613bbca91cdfa6d2e84678384ed983f3150fa0e5a9443b5dc4dd5022c2b5b80905a731a7

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      1KB

      MD5

      06c414e7734dccc76dee4ab9dab1dafe

      SHA1

      3735234813e21d4c9ccebeda02b6b4a2978f11d3

      SHA256

      9f6ba133f312404d106069710f89b7e82559558d0b75d7c7dc7a9ea26f0740c4

      SHA512

      adb13bfa5e0c16c85798f178ec6e152886d70d1ce6acaf09c3e5e534524fdc6b705157eb9a2623643376a3fce51a3cf1da4e9c795fdd0fb1d87f9f9febc565d3

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      1KB

      MD5

      d4b2114eb4b7032049805e74e2d30394

      SHA1

      3a3621ac6628636a377585789135be95ec52ca9f

      SHA256

      7a1f9783f7051be8b4a73b7dead6c7c998f53bf975f2912ece8b99af46313cfa

      SHA512

      c671f7069f6b317688b278604c9bb30d3a2e89cd33ef74f5fe0b1c0bfb2a7140e0599812dc92d557054953545271d5932a70345e590f31a0736f537fea0673a8

    • /data/user/0/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

      Filesize

      20KB

      MD5

      232e5bd469375181e66daa7b53a36dad

      SHA1

      5513a5faea82dd3bc9afa3c0ef2aae4d8cd110dd

      SHA256

      2034a7a983d6ef13a58d088dd227544ba765f2ccc288c46e1d135bb905b9a14e

      SHA512

      da23e6eed9006a06c9439ea52cb1f6ea67591418d50c27d834d5fbc04b5f49da3db52c446ec9b353887d818bcbeb5ada096b8f750a7f95beb976629fabc536a7

    • /data/user/0/com.qihoo.appstore/files/sllak/logcache/log1703451961333

      Filesize

      2KB

      MD5

      18ba0a08d5d0a77acf5330439609d4c5

      SHA1

      5b7629a207012eca70d08db0b49d364b45058166

      SHA256

      92dec318fb3c7d83aeadf90266c2cf06b47d44d493595333245d48b71954fbda

      SHA512

      2e06a2d2de3f8608f901c239ee1c4b23c5100986b9dc480bbbbe35d689fea6e061ef95ec8b82fb051068e1ecdc24b73c9a09f2b9e5aeef1d9a28e135d1000de0

    • /data/user/0/com.qihoo.appstore/files/sllak/logcache/log1703451961438

      Filesize

      596B

      MD5

      7199e663d5247fc350f54b85a56e5d56

      SHA1

      0b02a3059add94a0617ee9836a070791e09c5c37

      SHA256

      6d4710d71342c7adb7807fa56afaa379ee5c0ccd75bf0e373f8dd4913a2b323c

      SHA512

      8ccb0e81648e30bd25364bf08b2536dd5463a55505c20d1e83596f7ab976bc5147504344db10c8bf3bb31a346c319895fa458998603495e0e4793194befdfc73

    • /data/user/0/com.qihoo.appstore/files/sllak/opt/4516/finalcore.jar

      Filesize

      77KB

      MD5

      c14c8a2f5d3a7c47eb2ca8c1b6e69adb

      SHA1

      4e57b3c0f34427aba8a5be40c2e9b627172a89c8

      SHA256

      7d7ada76ea057847b5c47ed0f16a6d0e52cdbebbbdb08c1a9519acf70a1a4107

      SHA512

      2be420b849c0fa84d3c594ab6bc85255eb54915e05aac5fd3d711e8dc93f484c5a2add2c662a858d4c2ce316a716c9e930122e9cb1047be7482c495242d766e4

    • /data/user/0/com.qihoo.appstore/files/sllak/opt/4516/finalcore.jar

      Filesize

      176KB

      MD5

      b667ca71e42bbeb899566c8834ed085e

      SHA1

      053a3f889e326efdfa0d3ae7e5b2655f0b7376d2

      SHA256

      536678202267f95d80480f15065e784d7ec609922a0963d935e9c5a4b0f62bef

      SHA512

      52255d3d7066d01bd47a9da788f86c707af14e7666a918737fa5ffb4bb003e97b28dd84a7cead3439ee39e10b568c97e80174a80bf776c7dd58335b06656f8f2

    • /data/user/0/com.qihoo.appstore/files/sllak/opt/4516/oat/finalcore.jar.cur.prof

      Filesize

      556B

      MD5

      aca09954cad31635e967fa7ea4ad0b84

      SHA1

      679dee2790896d338557bf9dc77b5dd327c8fcc1

      SHA256

      360e0d42bdb9984e0a57d67d7c5835e421756bb80a8a2201ee5c326f88f75c10

      SHA512

      93ec6dd424b9194b9da18c346ee46939697f4d259cc2479d9c72f42aa297e660d4b5fd56d30ab6523e6f5f41bf840653b1bdcf3ae638c5a4635eb549fe329384

    • /storage/emulated/0/.sfp/.sfp

      Filesize

      83B

      MD5

      38ce979056b00a8f7887038cdf094f56

      SHA1

      5fe4d95672d1bb05b3d817a4ade4368d9f77e12a

      SHA256

      630272ec76772fc4a989cb5cdac1583889d7bcfc6edf707731a8804e6c6e608c

      SHA512

      ffd93d484ab6d02a7667d78f77e8214ad947c783a2518606cce6fda932438a28f73f6dae7bbf9df871c7e34b7fa4d437465dc891a40c56b7dd3d2ccf5d1e1d0b