8471ffb57d72324b20d5893f0774f271f70718014bb6c5db6061fbf3be4e597c

Analysis

max time kernel
2743365s
max time network
159s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23-12-2023 20:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8471ffb57d72324b20d5893f0774f271f70718014bb6c5db6061fbf3be4e597c.apk
Size

6.8MB
MD5

c351f6f33541e0e6a539d8783d517046
SHA1

fc9aed0c94b7b77b3ae420b49678b49271dd0b80
SHA256

8471ffb57d72324b20d5893f0774f271f70718014bb6c5db6061fbf3be4e597c
SHA512

65ded5e36ebfc27adfa1d8c387d58cfabd6eb879d649883b795afa7c0d1d7ca8647f9b561eaaf82525762e1912a4c6ac30677856316c53d0c8b26622bf1592ff
SSDEEP

98304:Gr761NF7mPgOA0bzmrxQuB7MmNnt1d/AYs/I09XfbCFXruTcECHD+/OxN566D6b7:GrsOtM2uxMGwJCFFZ+/jqguPi

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.qihoo.daemon

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.qihoo.daemon

com.qihoo.appstore
1⤵
PID:4245

com.qihoo.daemon
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4275
- /system/bin/sh
  2⤵
  PID:4381
- cat /proc/version
  2⤵
  PID:4460

com.qihoo.appstore:critical
1⤵
PID:4401

app_process32 / com.qihoo.appstore.rootcommand.persistent.CoreDaemon --nice-name=com.qihoo.appstore_CoreDaemon --daemon
1⤵
PID:4468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.qihoo.appstore/databases/filelist.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.qihoo.appstore/databases/filelist.db-journal

Filesize
512B

MD5
9f0d71d7216a433ec3e2b9d443883816

SHA1
81e5b3f0a870c5c4dfbf5349b8e4fd5e3227239f

SHA256
79a9a44ab3f34f9fbb1c0e557c5b999eee59bdaae7b56912d0aa37d932e0f389

SHA512
c9ab4c363c02a948adf4c8ee0c3f16b5630ac27c0868e5aab146cae14d6f7db525eca3c6ce5d6894adfb35ff5bbdd939c7d2149173be4d7a616fdd3f202ab4a6

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

Filesize
4KB

MD5
24c19b6bd26c0f1e4968d55ca49a43a7

SHA1
45eeb3636a5a5796d1eb4869bfc20364bac73ae3

SHA256
69f261f37249f9dff1463094c89b2266867a346c719c59336556b23a244783ff

SHA512
e53c3c76731a9e2c10f5c45b8a89d265da7ae7ea33d64f27b947c12399596a09f1dbb12fafc5a7f17b5eedb92855ca3648b577883903b09b97476f255896e4d5

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

Filesize
536B

MD5
8b7758ee70eec53cdfd7abc69394d9d6

SHA1
0e30100266aaaa691822cb9f56a7a6d573540614

SHA256
2ee1e81dcaa5741b7fcd03063898c53aaf58448873c3abd584d8e305ddc95ffa

SHA512
ae5eecc87aaf16e5df004010f9d4625753f6294f192c73848207080cd01ebadb533a6faa69d5373d5532f5a2d75e6933c8400626a883409f679069601d51d20a

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

Filesize
628B

MD5
86d97d552cde50222d12956726e8881a

SHA1
ba26a32a834712805b94e7da36c197af201aa7e4

SHA256
399048eae08b43429571a6aa4fc90471b47d0fb8b0416714b316a9b65a3acc27

SHA512
76c9da8f5e6d10deeed0faf8d7cf946e4ed86add93b4a2ce7ffb4256a96329b43348e80dc68ea07f84856bb67010624291cef7ee66a32af9a0ed17d0466da30b

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

Filesize
77KB

MD5
912595802074bf41d4cc2b99fce70629

SHA1
1717f173cc2e1547ea7585aeae7d7c8ecf03ef7f

SHA256
d1dc8abda3e5c71b768273b81c0e799248dc65a62d662c6dc72de101e8c0dae4

SHA512
66b292f6a0bcfa2a39e57a9f6118d395865eb2af467589a9a92174748d5b59e773ce8f729f62c93698323904cfe90ac0d0a43528e3f16b91612896090e5e41e5

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/data/Y29tLnFpaG9vLmFwcHN0b3Jl

Filesize
77KB

MD5
a5d52b1b372bae2746b34fa229fc0541

SHA1
7c7c8fcc87ce0179c1c65d992799ec2a16e488b6

SHA256
0c94c4c0c043953761b93fef1567b565ee47a085a0a756ba1bc735cbec194222

SHA512
f7abba792ee8d74be296dd58d1de79bd81ed5ced2ca7403588aa1969399563e7037dddc277023926a08345efb412ada6c10f39d78e2830029566ffdab397a96a

Download Submit
/data/data/com.qihoo.appstore/files/360/sdk/persistence/report/Y29tLnFpaG9vLmFwcHN0b3Jl

Filesize
624B

MD5
0344cc4f667111f20091231702470ca8

SHA1
a33746148ffd3a8a7ab13698b9cafb7f15a86679

SHA256
841cf611a1143fb824506302658fb00e1d80583e5e9838e6c7a75563c8127dba

SHA512
a7fa9f9d1877020b38d0ae5a2a94995c9d04f72797a0a922feaadbe0dd5443ba2b63e40e7a2c8f9345d30d6a074d1486815c4db6bb3c45d29219106d60d42c1b

Download Submit
/data/data/com.qihoo.appstore/files/sllak/opt/4245/finalcore.jar

Filesize
54KB

MD5
36bc61a915305449fff984bb0df014ac

SHA1
1ead3486792a2349539b12d78af72bdae9380b66

SHA256
7cc42061aa1d36c8b6d666afbbab3a5fb92c5b152972e777ae27b0453d9af31a

SHA512
d8ec27ca787c360d1da8951cd87a87a8ae22d62ac183e5bbbc2d3812d3fbb04ee59b07bdb6ea1a60f74cbdd285fdfa3f50bc56391391206dc63174bb8600f63e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads