Overview

overview

8

Static

static

6

c38c09e3e0...68.apk

android-9-x86

1

global.apk

android-9-x86

1

global.apk

android-10-x64

1

global.apk

android-11-x64

1

global.apk

android-9-x86

1

global.apk

android-10-x64

1

global.apk

android-11-x64

1

hackdex_dex.apk

android-9-x86

hackdex_dex.apk

android-10-x64

hackdex_dex.apk

android-11-x64

qihoo_plug...xi.apk

android-9-x86

1

qihoo_plug...ge.apk

android-9-x86

1

qihoo_plug...ge.apk

android-10-x64

1

qihoo_plug...ge.apk

android-11-x64

1

qihoo_plug...el.apk

android-9-x86

6

qihoo_plug...el.apk

android-10-x64

6

qihoo_plug...de.apk

android-9-x86

5

qihoo_plug...st.apk

android-9-x86

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c38c09e3e027198ad0f9176e58ef5f18107f87412306a4b83cb564c37c106068

  • Size

    15.1MB

  • Sample

    231224-dmhc7sebck

  • MD5

    ac386ade011aef3f4132b26399cf231a

  • SHA1

    1db16f124c3327de1100f7e5245a8320d553b124

  • SHA256

    c38c09e3e027198ad0f9176e58ef5f18107f87412306a4b83cb564c37c106068

  • SHA512

    ba766695bd2573974f61d46dab25537fc54164386f000a2ce1ba01bac36510332cdec3b71831cffcdcd1c5a0b3a515f6db3af4b50b1c6e83b9cdbf7efb7ea896

  • SSDEEP

    393216:vqWmhLIhd9noPTzOC8g/TwDdhALgqvD8tJr5nRZ/XXy:vXmhLIhvoZ8iwDdyLDD43ZfXy

Score
8/10
androidevasion

Malware Config

Targets

    • Target

      c38c09e3e027198ad0f9176e58ef5f18107f87412306a4b83cb564c37c106068

    • Size

      15.1MB

    • MD5

      ac386ade011aef3f4132b26399cf231a

    • SHA1

      1db16f124c3327de1100f7e5245a8320d553b124

    • SHA256

      c38c09e3e027198ad0f9176e58ef5f18107f87412306a4b83cb564c37c106068

    • SHA512

      ba766695bd2573974f61d46dab25537fc54164386f000a2ce1ba01bac36510332cdec3b71831cffcdcd1c5a0b3a515f6db3af4b50b1c6e83b9cdbf7efb7ea896

    • SSDEEP

      393216:vqWmhLIhd9noPTzOC8g/TwDdhALgqvD8tJr5nRZ/XXy:vXmhLIhvoZ8iwDdyLDD43ZfXy

    Score
    1/10
    behavioral1

    • Target

      global.apk

    • Size

      22KB

    • MD5

      2b86f907e60ba79706b0a1296b0162fc

    • SHA1

      3102d66daf2b4a99fff462d2c01e7f582388d827

    • SHA256

      9a597503c904ffe745726721d6d2c83e0ed1a51d08e85a5a7925ce6c2b67ea68

    • SHA512

      7db54686960e3d4071d0d96fbb641c94a96a6d01aa66a1bf14f957da932b45ac3af5a1d831e65a89fbe57131be4013d5fe1fde59967398351f6082bfe97c7f49

    • SSDEEP

      384:txbXf0wTWQqoWyuIZISKfEzgUWcGn/YpJf:7rMAWcWySZEzg1cGef

    Score
    1/10
    behavioral2behavioral3behavioral4

    • Target

      global.jar

    • Size

      68KB

    • MD5

      be90c46e3f0bd4de59d44520cf975229

    • SHA1

      afe441bcf69c5b762ce8b3a3f86b36ebfeda71e9

    • SHA256

      19a64b816df67fb1ab3fcf9708b0e41d48cdca5d1df18887eb61b2dacf9173a9

    • SHA512

      bdc56a0ab3d902959a65201d7b129d38b7fba14f68ecd1e2151d369b117a92b121f01f04ebb46d8eb68a098c670e1c15f13324bdb837f226f33fcc663939a602

    • SSDEEP

      1536:d5A4kSXiXa1Ddi0D5JNDv+fucfqduZcVzJ653CQHvJnXakk2:sSiXau0D7NaN2BulvpqL2

    Score
    1/10
    behavioral5behavioral6behavioral7

    • Target

      hackdex_dex.jar

    • Size

      620B

    • MD5

      fcebeee6a4ed0510d8a0d7ce3381badb

    • SHA1

      9634db686ee6047864d00b5951a0e69c3ae37ddc

    • SHA256

      42466757acaf630fb27ea532378534bad58c9048cefe33a6cec5242cd07e1806

    • SHA512

      7255809670ccc340fd602a221a994253bb4f0bc60e0e54b2544b9c203764b1973aabcbb32381941ed83b1799a4b50fae158fb55ae017076591650cac40380469

    Score
    1/10
    behavioral10behavioral8behavioral9

    • Target

      qihoo_plugin_diditaxi.apk

    • Size

      63KB

    • MD5

      c98a01361d3de3f75355d0361b5656f0

    • SHA1

      3762301d22aaf85ac79e06fcbd74ab8943c9156a

    • SHA256

      bd30fae6075d90c88592e8f302fa34f8f029f428a3bf333137c99179bfb65672

    • SHA512

      0388fef6603d2317e7d6dbc2a9d6c8e8a67cde1d2b0d9507215f6bc6130fda79af2e4551e852938aacadf0f3751aab132f9ce0bc5f0b93af0d39e7741a74de26

    • SSDEEP

      1536:lUTXAdHuGEQNaz3pZeI7tt5qR632hUtiMcrThvu:lUTXAdHVNatwYr2siMcXg

    Score
    1/10
    behavioral11

    • Target

      qihoo_plugin_image.apk

    • Size

      371KB

    • MD5

      5745c9ea340abdfc4c06c21b9503e143

    • SHA1

      91365e30f563caedc63c1475c7f829fd2b1cb93c

    • SHA256

      ea3c1907a10eeaaea167a957e2cf2bb497f75a301bb32dca208cb5f89d64002b

    • SHA512

      346f64b62d60f0524da04c5b012521d6eafee15a0f8b4f87b768ca70ac6192155fc6bd477e5ee8ab859c483ea9bf57ef61cab7cdda2ba94356251cc2763d8ca6

    • SSDEEP

      6144:GjhYKMqGezSQEog5S51jKYTEGhhupy/kkioSeP5Wsv8HOE5X/Z454p+6zG6FSY34:GFYKLarogE5xYbs/kkM+WmlcXSqp+6zm

    Score
    1/10
    behavioral12behavioral13behavioral14

    • Target

      qihoo_plugin_novel.apk

    • Size

      2.5MB

    • MD5

      0ae765f4b91162b0da9caacb33a735cb

    • SHA1

      40a1cec4b7e89566d8f3dbb6423be836f36f5125

    • SHA256

      5605e3247d30aee3cb3c0f495ffd53c7fdfbbbb1171051be7ffe1485180f8a96

    • SHA512

      e6b872856f85f3c820e99edad0a4c8698b6956b573c7a6141a4722684515281a2ea4059ca1977f2749816e77db99ddd8916ba23de2906975f688898f6d699dbd

    • SSDEEP

      49152:Uu762lDh/wuQZV+tgCw7jQyr4oU5UeYfDajxn:R7/NhohZeg+yr4oU5XY7Uxn

    Score
    6/10

    • Reads information about phone network operator.

    • Requests cell location

      Uses Android APIs to to get current cell information.

    behavioral15behavioral16

    • Target

      qihoo_plugin_safebarcode.apk

    • Size

      2.4MB

    • MD5

      49777ce67379601000b83502bef01ca8

    • SHA1

      7a5a2c487ace3b83b07c7dd8a33c8ad12ebe331f

    • SHA256

      5c309a3d0c59de52e49b15b2bca645133f96f60aa2f5054bc032d48eee0333c4

    • SHA512

      d192de95344b0bacca299a2360e10f9a32a905a1c9e4ec7bb82973865d8528896aac5a4aebfdfc9780b7b298980ac1e161bbfdab72558634e5d20b09045de819

    • SSDEEP

      49152:sU2dH7zdmYHQWV4vYWl86Ud6F7CvMj3GBnxdIK+/4ZYKX:qdH7ZbHhV4vYIsd6F2vmwf+6YI

    Score
    5/10
    evasion

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral17

    • Target

      qihoo_plugin_voiceassist.apk

    • Size

      3.7MB

    • MD5

      4a058717cf66df2719a4c3789c2eb73c

    • SHA1

      c834c3311606748452efedaf1dbce18cb0a6fce6

    • SHA256

      66645116e6580ca0b89e83522db6dd63546725fd46fc34ff273c066c7138db24

    • SHA512

      cd6b5b13dd322ccc95769b0308bdf308178611c24651b8022b2c92f14f0a827f8d16b63753abe51ddb96eefd1128f4c1c5b4993c1e47c511489c63017c0c1c8a

    • SSDEEP

      98304:nLUXIDsHqM5H1DTMwoXhDPPfhKs9ZF2ivhKs9ZF2iveGEpp:nLKDKhRDPfPFzvfPFzvPg

    Score
    8/10

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Reads information about phone network operator.

    behavioral18

MITRE ATT&CK Matrix

Tasks