664fc6fafd45cbfe9e43471dcd6fa4923aa206a1449d9ceda375deb952c5ed49

Resubmissions

08/06/2026, 18:05

260608-wpg5bsdz8j10

04/06/2026, 15:24

260604-ste9raas6k10

Analysis

max time kernel
12s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
04/06/2026, 15:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
664fc6fafd45cbfe9e43471dcd6fa4923aa206a1449d9ceda375deb952c5ed49.apk
Size 657KB
Sample260604-ste9raas6k
SHA256 664fc6fafd45cbfe9e43471dcd6fa4923aa206a1449d9ceda375deb952c5ed49
MD5 77c373eb7fbc8c1dae6333dc817b9e4a
SHA1 e9d4a39e763471c406490e19c22b98d9fa5a9151
SHA512 5afbbcc3413eb5e5cb28349353b9a3decdfa9bc0129ec1b900bfa3d253a168187b2c58fc3bb6f5710a0c15644bd1e86d44e0ed5a4f90a80055b6127864899dc9
SSDEEP 12288:zTrnWqQxK7DbHnqAjtQ9RJbCdez/Kvl/LxgtlK/exLLwhzJChvC/ue7Jl83WunL0:XrpbHn7tqJrz/Kvl/LxQKyB7e7JwrnL0
TLSH
T19AE4237FFB6262F0E61703F4E39E980E9FDA28E7597562C10E1640D8287F1E51B91E84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 3 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.qihoo.permfect
Accessed system property	key: ro.hardware	com.qihoo.permfect
Accessed system property	key: ro.serialno	com.qihoo.permfect

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.qihoo.permfect

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.qihoo.permfect

com.qihoo.permfect
1⤵
- Checks Android system properties for emulator presence.
- Acquires the wake lock
- Queries information about active data network
PID:4756

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

busybox

Path /data/user/0/com.qihoo.permfect/files/busybox
Size 661KB
SHA256 601f51e799705ca3b7d1aa017b49076059346297a2a79b3df8cbc88b3308266b
MD5 9c35a1fdb2ec67789d14f9d71e5512b9
SHA1 f467edac2d4b63d6d009bc1983b6f9cc9f5f1592
SHA512 273c52fa9c4d8ba8c62c22d10504d5236130330fd0312efe4de72f96b399c425f0504b4cbeeabfb9126f28321c3dd631249790736fd33f131b8e26fda8555128
SSDEEP 12288:q7smGX9VNtLGJIwDNMYRAmShw5XIZOaJyp3ejCgQEHx4L+XEpT3gDrcez5GOcBe6:sFGt83DNMYRrVXkJyp3e2ax41EHzK
TLSH
T100E44B29F981AF62D5C0667AFA4D815833131778D2ED320689289B3C37EF86B0F3E555
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log

Path /data/user/0/com.qihoo.permfect/files/log
Size 69B
SHA256 7b719aa001457e0dfd5003baeffdfda9dd14f805da81d3a74314eb033af99d98
MD5 20f0455b59f07f667e701f837fc5f7cf
SHA1 5a80e18fa997618ca8be733a8f9dbe7e159e3681
SHA512 6291abf688ca0c2123acb76fd458ac12c6bcf0254cd17e30b79268192fa0586fcc5df1bbfd0c646a981b2bc19690cdb7f3b15be2be036be667e8b40cf2fe2bcb
TLSH
T168A002D3483A9CA314250D85CB56C2E51CC1335040294450A186F6423BDF5B402E7210
MD5 SHA1 SHA512 TLSH

Submit Download

log

Path /data/user/0/com.qihoo.permfect/files/log
Size 115B
SHA256 c762505574774f146d5e7cff478c3fc92834806cb193956a114347b40c320788
MD5 eba5c92308c67d3514b015edb1b06993
SHA1 e27baea69903f256e43eb956f436c6cc32bd697e
SHA512 a97eb594598ed68ef606c075cfc7d929416fac68a309d4b8c47b84695363adca6983808e60ef543b3539892862780182da23af14d01956b5bef538b59cc59a21
TLSH
T1D4B002E105559092E43509BD85888324964F136000156D60A64171421E1E54945D7C10
MD5 SHA1 SHA512 TLSH

Submit Download

log

Path /data/user/0/com.qihoo.permfect/files/log
Size 184B
SHA256 9752148b6bd2b9a0d9d5342673df373f35c60f1f444d9a03bbe3ff4bd424627f
MD5 7448068858fc4e93a2617aab35ccb78c
SHA1 437255377ff28f4081cb8e7805c3f87b463ace6b
SHA512 c781be3a525c7234e91f3d8eec8b9453e0b705c1ccf19e3d191a778f527c035efc18e28f0b7c0d6d55b8cefae4751786338a0f89f7a1b8ee827575c6008f3423
TLSH
T191C022E088E0C0F3F02303B8A28CC238AB33B30002802A00A20AB0802F0283EAC83808
MD5 SHA1 SHA512 TLSH

Submit Download

log

Path /data/user/0/com.qihoo.permfect/files/log
Size 369B
SHA256 4af397e6e0febbfe103566b69121f64d3d2347ccbd72689c0b550e09e908c39f
MD5 a6e52874074127fb84e9bbe697ec99a4
SHA1 34ef37379fe65d36c0027b2acfe7c85242dcfc09
SHA512 417a3b8aaffa47fcb1115c447cf463fa82c71d2aca06a2149fa0b3b9ae3d99cfcdeb86db80be1713309e300a361155e951df407ee9377c42bddd7f0f633e0251
TLSH
T17CE0128D6C701C52D9888C75B91CC1642B46EDD12E2A6A4177F290432CAED5EE2976B1
MD5 SHA1 SHA512 TLSH

Submit Download

log

Path /data/user/0/com.qihoo.permfect/files/log
Size 562B
SHA256 84e979dc1636a5bbf2c99e1f943a6afc74a7ba3c660aa432dc412b551a06c488
MD5 ee077dc21b799fbdc88010d25f24429e
SHA1 40faa867fbd1df8a5d4277972b82cf011872867a
SHA512 ec04244179cb0e2dfee40d2f40568c664070d9e56b2fd4ab1def10ff94d469ae0a2c597482795000b9792977256cecc3a9ff5919ac7d8671045b35d8962a089a
TLSH
T169F0228E6C202842D8884C7AAD0DC0A12706AC510E392E4273F190832CEDA4EE153630
MD5 SHA1 SHA512 TLSH

Submit Download

rcf

Path /data/user/0/com.qihoo.permfect/files/rcf
Size 212B
SHA256 28f418591f26987dc24c6fe56597c1ce825aef51294b36f6e925cfbc43975547
MD5 4e086399a1028f4ff5611f7c78d20474
SHA1 5775550ddcff3ac92f31e120d8956c107c9197d3
SHA512 a09b6c3c21a2874edf7b80aac923d562478494fe20d0d0c3119f7a7fde5b8a5c868a46fe7682769de7f3b05da10d6a4138ac1a240a019846569b12503f39d5c7
TLSH
T1ECD02340D63D71F5850D451BF01EF1A22F4791645B4AC7BCD9756C543ED45721A3A409
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads