906e34817bf26a0a057c35513f941a8862dba537a8af4924d04dae2af188aa7d

Analysis

max time kernel
4s
max time network
142s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
23-05-2024 04:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

com.qihoo.plugin.splash.apk
Size

670KB
MD5

dedfedd73b92b9f264e5244ab5d76fc1
SHA1

7da66f9ef927cfebc2c103d7454ce00bf00e7d31
SHA256

b606f0029b8403132c706d3d31b02b8880ef951be7fdd9cff6cee04f7d15330f
SHA512

81c646fa27c1e5adb56e6e0895c2cae1af6b0398ac5590c170fffce0a3c88ca56439d911b600d2e231605bc4e6314c2c84636ed1b7f1a9b6d4ac4f55f5e0380e
SSDEEP

12288:N/IsDcayTTDKEMhuxi+gq6NMiB4rNrOSSqXDf61U6c5L9dZ+N/sT4IFAkvCfCb:5B6TDvMhv7q6NMNrNrOQuUdTkN/sT/24

Score

8^/10

banker discovery evasion

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

Download New Code at Runtime
T1407

Processes:

com.qihoo.plugin.splash

ioc pid process

/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar 4700 com.qihoo.plugin.splash

ioc	pid	process
/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar	4700	com.qihoo.plugin.splash

com.qihoo.plugin.splash
1⤵
- Loads dropped Dex/Jar
PID:4700

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

Filesize
153KB

MD5
bc3cb0eef1d19c47cf3f1a2211258aee

SHA1
7f10b763a43b6900cd9925b014c1a794994d37dd

SHA256
79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee

SHA512
51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86

Download Submit
/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

Filesize
346KB

MD5
7ca872b45694937f04aca732b336950c

SHA1
762652d725c00e27a3a9316322fb0049b154cf45

SHA256
d482194392c58bab488d65622c27be7a91f673d1c3398e9dcfcfc015f20ce7eb

SHA512
260b9bf7a17e0e71cc5e05d447c578c062c80dfe35b27c658bda6c3071a30a1649e2181f287d0f3823d34f99aab604fb8b520da7cd9e1f9ce7b6552d5897fbf9

Download Submit