8d1c71b476c555933681f792d5f82c2135a46ae02e87fdd625b7c9be8ad28eb2

Analysis

max time kernel
3s
max time network
137s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
14/09/2024, 07:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

com.qihoo.plugin.splash.apk
Size

448KB
MD5

c2113e90fb97212c968fbab23cd8ba5c
SHA1

c7a0854d096f549b93b0e6bf28e36ff7fe27bc43
SHA256

b6682034e1fcfe8f448a2a604c3dc473d842732bfb34b53377d43e418a001a6e
SHA512

0bdc8398dae373d48d84601eacced88b5eeddde469f46ee87d0c6fa16bbc6e1f91db863c1345e2a70152dc38d8c4ce9c01f4981d67daeea1fb3f82a03d25ba02
SSDEEP

12288:MhDEVb5D8huxi+gq6NMiB4rOZXL9dZ+N/st4IFAkvPQL:juhv7q6NMNrOpTkN/st/Lq

Score

7^/10

banker discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar	4488	com.qihoo.plugin.splash

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

com.qihoo.plugin.splash
1⤵
- Loads dropped Dex/Jar
PID:4488

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

Filesize
153KB

MD5
bc3cb0eef1d19c47cf3f1a2211258aee

SHA1
7f10b763a43b6900cd9925b014c1a794994d37dd

SHA256
79e1eee2d72cb40e0c931ed08e609891a41b0a2802d6e0b98abd7970238b4eee

SHA512
51f66294dbc34d4c618e2b16449c47f73734f1d5a57d2e40927ff5ab808604206fda84af29653cb9b018f30749e54a0a481e796cfc7b016a317ff7e83860df86

Download Submit
/data/user/0/com.qihoo.plugin.splash/files/torch/core/3.7/finalcore.jar

Filesize
346KB

MD5
7ca872b45694937f04aca732b336950c

SHA1
762652d725c00e27a3a9316322fb0049b154cf45

SHA256
d482194392c58bab488d65622c27be7a91f673d1c3398e9dcfcfc015f20ce7eb

SHA512
260b9bf7a17e0e71cc5e05d447c578c062c80dfe35b27c658bda6c3071a30a1649e2181f287d0f3823d34f99aab604fb8b520da7cd9e1f9ce7b6552d5897fbf9

Download Submit
/data/user/0/com.qihoo.plugin.splash/files/torch/single/core_update

Filesize
13B

MD5
ab6493bf0ae03a81d0ba98bb984595e8

SHA1
025b1a3f7719cff3066cb2eb683d8bd3730e19c2

SHA256
60ff6d5ea484a88d03a7a7a969a7bb8f9dd9763d265397245d96de5cff690f44

SHA512
c7ab8d86528dc75692a3c7072fb103e5640f12897a3cf79b315db5ecb9d092c65b24cf4d8ee0e2caae37019c3ed6e77a2c9b4bab0702b689a452b6a1bc3b75e9

Download Submit
/data/user/0/com.qihoo.plugin.splash/files/torch/single/profile_task

Filesize
13B

MD5
4e90015482c220aaf6a77b88654e0a64

SHA1
6e99c9532330e5a971cf6537c588d547731413e7

SHA256
a9455c76fbddabd4e903919c87a74d988f75e50dd15003a38c56e4d7627ed1cf

SHA512
1b12f8f404c6a83424a449a9eb0c55f95f7362faccfb90e2abe0ba8b56d04cd1f89b91bec2edcecba4bf3e288640eb96322193957e29471ef05d2662bb1eba11

Download Submit
/data/user/0/com.qihoo.plugin.splash/files/torch/single/waitingDown

Filesize
13B

MD5
818f60d78a430d928dab9dbde4078cdd

SHA1
b3df1e74c58de2a416885864d3cce360b29b1b4b

SHA256
b54eba9a5a9e22b74a94f7595aa4e3602d6d39b573c4aa16424f7f0b15983cf6

SHA512
a3e9313652a17cb7da256ce7addbf0a2feb7e088389ed6a20464dbfc3e1c10e1057db6ae72262ac5b52490fb77709020ed42ccb85e7e885f6846e1d3c8a744cb

Download Submit
/storage/emulated/0/Android/data/com.qihoo.plugin.splash/files/.sfp/.sfp

Filesize
83B

MD5
b4eddf88c46cda834ce06541f0040f4a

SHA1
064ef289a525f3d5c74214a512ba64c9ef53eeb5

SHA256
c577f026cf015fa64085742fa570be3c2210ae7d8012d78624adf85507cb3d5e

SHA512
dd4b58e7183a3efe9be033348afaf7505c266f4d5c9c6c5ec62320125afeceffe79a2a2fb8386b72bbb01f50d4099fdc0add7903bf8e405eb055ef3e407852ec

Download Submit