Overview

overview

8

Static

static

6

b28aae005e...c1.apk

android-9-x86

8

com.qihoo....er.apk

android-9-x86

1

com.qihoo....er.apk

android-10-x64

1

com.qihoo....er.apk

android-11-x64

1

com.qihoo....te.apk

android-9-x86

4

com.qihoo....te.apk

android-11-x64

4

com.qihoo....on.apk

android-9-x86

8

com.qihoo....on.apk

android-10-x64

8

com.qihoo....on.apk

android-11-x64

8

com.qihoo....sh.apk

android-9-x86

1

com.qihoo....sh.apk

android-10-x64

1

com.qihoo....sh.apk

android-11-x64

1

com.qihoo....eo.apk

android-9-x86

1

com.qihoo....eo.apk

android-10-x64

1

com.qihoo....eo.apk

android-11-x64

1

com.qihoo....ew.apk

android-9-x86

1

com.qihoo....ew.apk

android-10-x64

1

com.qihoo....ew.apk

android-11-x64

1

com.qihoo3...er.apk

android-9-x86

1

zsrooter.apk

android-9-x86

core.apk

android-9-x86

core.apk

android-10-x64

core.apk

android-11-x64

com.qihoo3...er.apk

android-9-x86

1

com.qihoo3...er.apk

android-10-x64

1

com.qihoo3...er.apk

android-11-x64

1

com.qihoo3...vc.apk

android-9-x86

1

com.qihoo3...vc.apk

android-10-x64

1

com.qihoo3...vc.apk

android-11-x64

1

com.qihoo3...st.apk

android-9-x86

1

com.qihoo3...st.apk

android-10-x64

1

com.qihoo3...st.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b28aae005ef04428d3da48e0eab7fc9c003c195181a9a85c7f37cecc424865c1

  • Size

    26.2MB

  • Sample

    231224-bs3j8aehg5

  • MD5

    13a59ced1367d14daf2cb8e01d6385ca

  • SHA1

    23ac2871de9277c784cd0d20d373460770bbeba0

  • SHA256

    b28aae005ef04428d3da48e0eab7fc9c003c195181a9a85c7f37cecc424865c1

  • SHA512

    b07f63c0fb60f4f4a22f1c72d1299e0888f0f267ee64e53c2010b27bf4c3ed40107ec4b85a529f3ff40b7fd3cdbcf29e4ad32b967ce07fea145a33991b36b4cf

  • SSDEEP

    786432:GUoOJP0eY2EXK5kHkHH3zZGeFRq2RiK/kxrW:GUFJceYdHcHDYeFw20KSrW

Score
8/10
android

Malware Config

Targets

    • Target

      b28aae005ef04428d3da48e0eab7fc9c003c195181a9a85c7f37cecc424865c1

    • Size

      26.2MB

    • MD5

      13a59ced1367d14daf2cb8e01d6385ca

    • SHA1

      23ac2871de9277c784cd0d20d373460770bbeba0

    • SHA256

      b28aae005ef04428d3da48e0eab7fc9c003c195181a9a85c7f37cecc424865c1

    • SHA512

      b07f63c0fb60f4f4a22f1c72d1299e0888f0f267ee64e53c2010b27bf4c3ed40107ec4b85a529f3ff40b7fd3cdbcf29e4ad32b967ce07fea145a33991b36b4cf

    • SSDEEP

      786432:GUoOJP0eY2EXK5kHkHH3zZGeFRq2RiK/kxrW:GUFJceYdHcHDYeFw20KSrW

    Score
    8/10

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Reads information about phone network operator.

    behavioral1

    • Target

      com.qihoo.appstore.notification.controller.jar

    • Size

      522KB

    • MD5

      f3f3cdeda1feebf6da7bbe3920410c36

    • SHA1

      60d5cf1f73eeb4b9ee4c72bbdd5fa068ff5e6d50

    • SHA256

      a40f7fbf1870eb31c5529ec45e77e26fd311fd944e16f590efb7113d09cb51b4

    • SHA512

      cbdffb9d95e017665a9459628a0ae3cc73b44fc751d95d8b19095c3e5d3f0c7ba35792d64b5bbc8f4baac7e7be8caf79a8d5504c453af348064e6d35db88cc61

    • SSDEEP

      12288:otDhD2EXwbsOBHKgM2CwrnPmuMZRv1C/mu4Dx3CWlWcRR:0D8HRRP2PNC/h4DjFR

    Score
    1/10
    behavioral2behavioral3behavioral4

    • Target

      com.qihoo.appstore.pay.lite.jar

    • Size

      260KB

    • MD5

      2440eb04289baccc027a4ec684d2a14e

    • SHA1

      4727a55de77c8e779849f6976084c4fa8ace3830

    • SHA256

      fd1fa6bda15e3145f109a643032a43c6d6f0576e2827d15685c934b82e2137b2

    • SHA512

      c09a345d9aaeae7298ca4a0b8533627b4d9d652212b5e76a37a09db3cafa29e3c7163c4e0fbd4f05ba03a781a6f7037609fd77c1bc03cff69cd4dc33a0a37719

    • SSDEEP

      6144:garGZOh0LeG1d3rUjjCXf7FyZwRMWgigaHjUNA2OcMMmIWmKVQlQ:gYADd3rMWinWgi1INyNMcmo

    Score
    4/10
    behavioral5behavioral6

    • Target

      com.qihoo.plugin.modulation.jar

    • Size

      2.8MB

    • MD5

      79402ab810d659ccdac6e05e727921c6

    • SHA1

      e428b77c4109b35dfe924ce8a162f74b744bd1d4

    • SHA256

      8bd5d70525cf002b55b71fc2450055c19a3637470c314017d39db73d2256109b

    • SHA512

      f17d1b58645d43395b4315dbd97034a14d5abd31ad858c552f6be548b0e0b25ae63568e45fce5339b3302cbfe7125b81bcf924a7c7bc6c8b1fab293e08636bb0

    • SSDEEP

      49152:6EjnSNWcuWzYR2AF6ycLAq+nrNx/kBdkOfiWGzxonZX4Cuo+k89vI2tdM94+VBu7:6EjnDYRi6ymAp/CBbGNoJlD+04dM94+C

    Score
    8/10

    • Requests cell location

      Uses Android APIs to to get current cell location.

    behavioral7behavioral8behavioral9

    • Target

      com.qihoo.plugin.splash.jar

    • Size

      828KB

    • MD5

      d91226c7bc6b530777d30bca3bd0fe31

    • SHA1

      aec0a7dc4ce28d9a18b4dcddabb73cf4aadb5865

    • SHA256

      4f9bc427ce4bb008a225b622a7652220be3e3988a88a6f4c387f75ea2149ebd5

    • SHA512

      e57beeaf972f5f8889c6aaa3e63f840ff4783d8d0368fa4e7c12188a8e309a853f36887da0629a149d187c9105b83dfc4d7c364c7828557e9bb7796cfe4d7e2f

    • SSDEEP

      24576:y6/P1PIaa7lIUQp8eQk1AHLVbT0ENS2TkN/sl/uJk:yU1PGIpOeQk4LVTFS2TkN5Jk

    Score
    1/10
    behavioral10behavioral11behavioral12

    • Target

      com.qihoo.plugin.video.jar

    • Size

      1.4MB

    • MD5

      d01bb1aedf33ec1b5b308188b896cf17

    • SHA1

      ec36a10ed73cb6a37d153465c4057001e09ab5b8

    • SHA256

      b4c19ba71553976da8447e88f746973f5ff4fe43177a957affb22c3e3b305ebb

    • SHA512

      8fda7fc8749c48fbe04ca522ea339f0fbb1d56ae044ae6a332c5f080045efa4bd9276dc3551a585687cf84a3ced88027ea14de1ac9adbb2982d7a57275379ad8

    • SSDEEP

      24576:SpKv0ha0uelxvFZzQsEFqcCz3GehoWBOJqyUfamEMxfEUNKrddCVCFqcRfN/Q:SpzhblvZUsiipW8amEMxf/KrjCVCFqcU

    Score
    1/10
    behavioral13behavioral14behavioral15

    • Target

      com.qihoo.plugin.webview.jar

    • Size

      1.1MB

    • MD5

      7a5508c5447a506c23cdd5a29e5ea014

    • SHA1

      70aeb82de7af0e9cfa9e2cc746f91f348f9cfa44

    • SHA256

      d04b941d5faa1633f73d23bf304d2bf7c31a04388683150528feee265c72b066

    • SHA512

      71b172fd39f817c6f1b4eb8cd9ff7ca0f34d6b6c8b7c58aef8412a49dd5b2d35fb720c4c8dbf6e0af161bff96938bc62780f367fe1989cfa4ddaf293682b0eaa

    • SSDEEP

      24576:WWF53wURN0vqLCAGo0VZZDMeP6FUTEy83+eUOKiHFm:WWF5N3Pm3o0VZNMev/8uev9m

    Score
    1/10
    behavioral16behavioral17behavioral18

    • Target

      com.qihoo360.mobilesafe.appwatcher.jar

    • Size

      807KB

    • MD5

      30e5e137369ef9e271caa7ec074d8c7c

    • SHA1

      894c1409dbadeed143dc5b684b245703d6da42ec

    • SHA256

      d27c22a55df1ef8b623c848ef4d88f489b6b95374b8e7609f389ee56bf5cef07

    • SHA512

      e27a782b7f0074ed2ee225ed679bc381b51330241077e9d4959e8c8ebeabfe7fc743bdb8ffc57945bb19e67927e69726fa937ba5a945d14f5b24f93ab097859e

    • SSDEEP

      24576:tl8/Q2j5Yw8UWiMmLkdrU3LFpA8GW4M38bcWlO:tCzj5ZFMmLPMWvsAWlO

    Score
    1/10
    behavioral19

    • Target

      zsrooter.jar

    • Size

      330KB

    • MD5

      20d47bb1d32b6220a41499835a20d6ad

    • SHA1

      8bc7eb3cf09d4d82b70c9b19d7ab150c648e222e

    • SHA256

      33569edd1f2fb70fee7042d91f81f7ce116edbfadcf001af09f86ddadf20ce13

    • SHA512

      a529e026ee8e5ff8ce1431b4fd90ae6e2e68aaf2b60a5bde3526bb9b284d8ec3218e21df06820d781913322f8214943b94f84cb94ebf254bba628ecc344adcf3

    • SSDEEP

      6144:utz9THWZhX/HJ6ZG+zd4z15sf4E08peAks4BHsgh0wCg6qXkt6sEMNQ6nj+:89rWZhvHAZ7zQ12f49seA63h0wEqXk/k

    Score
    1/10
    behavioral20

    • Target

      core.dex

    • Size

      226KB

    • MD5

      8331d7d6b119347e1191e6cd88c9d2ae

    • SHA1

      a8071d6c850cee92def6f34a4fb80c80d3c34399

    • SHA256

      08484e56156b4b5eff0abcc02de6e72c80f0631037287b383ab7f3fe3c3baa3e

    • SHA512

      d96f6b77d5d4849f46de5ebf775ae061e95d88e0ae86cb5b0e66c5b29f9722dc4afb3f2bc4fcdd2de427d83193b5af71877bad9de645fc6153080f50eabca838

    • SSDEEP

      6144:O9THWZhV/HJ6XG+zVkz15ofIEE6pGAke4DHsK:O9rWZhVHAX7zI1OfIv2GAqV

    Score
    1/10
    behavioral21behavioral22behavioral23

    • Target

      com.qihoo360.mobilesafe.authguider.jar

    • Size

      435KB

    • MD5

      1f321fae19322b9c7ee274001c885f47

    • SHA1

      4743f357dc72365db50b0a7af65d5c1c1e293c47

    • SHA256

      6ceb9a100a05f6713d708f01071af4b9c56092b43b7371f0aa85b6adcb642ced

    • SHA512

      df096d56eed005fa9925d310fe578dbed37127bd04fbf380c2a9c812058bb7e52fd70c2ed32e60ca53a977ebf1a59e0dacb1f94070922bdd5915c46ea8703a1e

    • SSDEEP

      12288:VENUFWF8bkQNvzkq31o5P5mbQ2Yk9RBZhmx4yPEUvCfp0sI:VzWF8bkQNvzrFot5mbLYk9TZhjK

    Score
    1/10
    behavioral24behavioral25behavioral26

    • Target

      com.qihoo360.mobilesafe.chargescreensvc.jar

    • Size

      381KB

    • MD5

      00e59ced9e99c712e81603efa5a5ce41

    • SHA1

      33a229a3a56ada837ec164f753f79cbbe59aaef7

    • SHA256

      0b214b67b08d0b266758e13bfb590d9b8756d9629267df9f29e7262473d0442a

    • SHA512

      c24d338d9453fb49e495330c42fee1257aed712d4cfa894e4ff3604cfc0168bd610d63333fac86836d95473f02042f18732be20e991e846548b04565c4ca1070

    • SSDEEP

      6144:GDM20nmfODUiAizBYWuGKopMzbh9gHD9oMD295t+/iEBZQQCKDKt6uVCMQrwog68:GwmfkvdhuGHp2bh9nf+9ZbVDs6uUwH68

    Score
    1/10
    behavioral27behavioral28behavioral29

    • Target

      com.qihoo360.mobilesafe.downloadlist.jar

    • Size

      1.6MB

    • MD5

      a2afb14e090dde60171010cf46c08d17

    • SHA1

      9b71e6edc1467d294f61a6efd697d7a34ac2180d

    • SHA256

      c53a242a7b3fd4d838dd4c619d1a2fb241ce26c0dc3baac6f05a51fdfd03cd57

    • SHA512

      0c5cc3ba5389903f17c5da13c22f850b009f66dd72650c8c7e70d493215d7629aecddb8e900bc327b36e087b8b9c9a9806a7bca964cc46f3ac26334a51c1a675

    • SSDEEP

      49152:WrDSAEwg5TtIkg55ZkaXOO+Y6ydcwxKfMaJtvSRRV:Wr2A7g5JIDtxXT6ydwRzvSRRV

    Score
    1/10
    behavioral30behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks