Analysis

  • max time kernel
    4s
  • max time network
    137s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    19/01/2024, 01:46

General

  • Target

    com.qihoo.plugin.splash.apk

  • Size

    466KB

  • MD5

    e698ea93bcff753c3d622f219540ff9d

  • SHA1

    2e85350605b7a6c73e806b76998e4544a88d9664

  • SHA256

    777a5341d270c39738cd32ea4c2ab6af820e443d5a45ee75fe429249f464bc13

  • SHA512

    864fb4af537b61761f631fe30929366b66f43fce51245a26418ca3ab52462401360bfeac5bf584521ac0ab8ab6f56e1c9c303276cd712cfcc2b3105c33b85dd8

  • SSDEEP

    12288:XS5P7PksxhWBhuxi+gq6NMiB4riCjL9dZ+N/sb4IFAkv6b9:qPkOuhv7q6NMNrdTkN/sb/eb9

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.qihoo.plugin.splash
    1⤵
    • Loads dropped Dex/Jar
    PID:4617

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

    Filesize

    153KB

    MD5

    bc3cb0eef1d19c47cf3f1a2211258aee

    SHA1

    7f10b763a43b6900cd9925b014c1a794994d37dd

    SHA256

    79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee

    SHA512

    51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86

  • /data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

    Filesize

    346KB

    MD5

    7ca872b45694937f04aca732b336950c

    SHA1

    762652d725c00e27a3a9316322fb0049b154cf45

    SHA256

    d482194392c58bab488d65622c27be7a91f673d1c3398e9dcfcfc015f20ce7eb

    SHA512

    260b9bf7a17e0e71cc5e05d447c578c062c80dfe35b27c658bda6c3071a30a1649e2181f287d0f3823d34f99aab604fb8b520da7cd9e1f9ce7b6552d5897fbf9

  • /data/user/0/com.qihoo.plugin.splash/files/torch/single/core_update

    Filesize

    13B

    MD5

    ff27bb1ea5055275a74c35a0a326d466

    SHA1

    c37b79d6e451c53fc51d34c96f1bd4d2a892efdd

    SHA256

    d3c2dadd9fc61cf0dbabe12144e8803e4e5b75651a44a8eb6028d3087caca841

    SHA512

    be15a09f210f96fabe415c37e6400d5e84b87491965138f3d556812ca14a36afdbb9e3d85dc35ba8d70df7fceee05eb8e12a6a731dacaa5a3534f3dde5fb9c33

  • /storage/emulated/0/Android/data/com.qihoo.plugin.splash/files/.sfp/.sfp

    Filesize

    83B

    MD5

    50c666b416439b3f0ae854ebb88a1019

    SHA1

    bbe56463561c264d6bcdc2e4ccd181ab0b13ee94

    SHA256

    5b8c8d6f401b3e72ef423d02f448e5410b5a544baa9267cc75d9229fef2c3e13

    SHA512

    918f53ad4c2b3a618aaa76e7a82036953d093f52ee1dfddf2b8ea82c928437fb0af8c7fb68b52caf8b2168b4b0354d6819f4cdb4983c2e4593222b3c673a340c