dcc1abd082e8c22bdbca27f572a9e061ffc599f47d87174e1cffe5ff3aef3922

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
03/06/2024, 03:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.qihoo.plugin.splash.apk
Size 448KB
Sample240603-d44b1abb55
SHA256 b6682034e1fcfe8f448a2a604c3dc473d842732bfb34b53377d43e418a001a6e
MD5 c2113e90fb97212c968fbab23cd8ba5c
SHA1 c7a0854d096f549b93b0e6bf28e36ff7fe27bc43
SHA512 0bdc8398dae373d48d84601eacced88b5eeddde469f46ee87d0c6fa16bbc6e1f91db863c1345e2a70152dc38d8c4ce9c01f4981d67daeea1fb3f82a03d25ba02
SSDEEP 12288:MhDEVb5D8huxi+gq6NMiB4rOZXL9dZ+N/st4IFAkvPQL:juhv7q6NMNrOpTkN/st/Lq
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery evasion

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar	4540	com.qihoo.plugin.splash

com.qihoo.plugin.splash
1⤵
- Loads dropped Dex/Jar
PID:4540

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

finalcore.jar

Path /data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar
Size 153KB
SHA256 79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee
MD5 bc3cb0eef1d19c47cf3f1a2211258aee
SHA1 7f10b763a43b6900cd9925b014c1a794994d37dd
SHA512 51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86
SSDEEP 3072:GYRLLNEK/MG/+UL3TMPAi7GGawe/JchKfbNewyfVF4BTP7rLqchL:GYLLNEkMG/+g27GGze/JSi5IuHLBL
MD5 SHA1 SHA512 SSDEEP

Submit Download