Analysis

  • max time kernel
    1213111s
  • max time network
    48s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    12/07/2023, 04:12

General

  • Target

    TikTok v30.4.1 [Mod] arm8.apk

  • Size

    187.2MB

  • MD5

    55117f98ada4bdb61e51057de6954628

  • SHA1

    1d8c1e1a0dd3bca1a80d92f20c022c28764a2a67

  • SHA256

    ca788b492d91f75f83f9fe2f56c9814505649eccebbada13fde177fe97a0ad7d

  • SHA512

    b269860b5290f7e3367e9d6361e981201e951743262222db12f439e3237a891c4af2769cb68ab7846f76faf2b920b5173fcd33a827180f7cc3c13882cd9ba819

  • SSDEEP

    3145728:gS02ofEw0XFIoC404x+hgUZs6VE5jP6HxJA5Zm6URbQnaOUjgaDIwG6/E:cW+P404VGnWjgxJA5hURcEfM

Score
1/10

Malware Config

Signatures

Processes

  • com.zhiliaoapp.musically
    1⤵
      PID:4668

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      e781fa0279b941bf6b6873def5948238

      SHA1

      80bcc88f1dd5ac6d38f3566c771d23c3c939de50

      SHA256

      2e43ea122379f968db83eeb2d31a87c867eae7a0a67eeeb4f2dce5d9c0e2b54a

      SHA512

      06cafccec6f0911ffc8064d45fb526f6662c155894ace94bb3109e2ee379d3ed051e7890fb4f975e85b12c0d49099dc356913c9a761f606266d9e67d85346d53

    • /data/user/0/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      c4ac46a377543c070f941eb60908ea81

      SHA1

      ac21217ff44b79493a34be93d42e51075bcbaeab

      SHA256

      17d07977f891d04b1276ea1e46dbffe408c545b1bc3f7f60f15ad7cfb9d64de9

      SHA512

      26dc107013ed6df90e6da5a87e46979d9c5302b406bc79f462da6b92b06da2693cd052f1c8a7b6920fec887aaaa25c94a6ef6bf60dba8f49aaae98fa118c8d97

    • /data/user/0/com.zhiliaoapp.musically/files/keva/repo/__hybrid_local_test__/__hybrid_local_test__.blk

      Filesize

      40B

      MD5

      d9417383e49a510a50c659aa490e6599

      SHA1

      61a7286393d4736ed77caa8a675fc9dec50caf4c

      SHA256

      00026c99bfe39e6f7afdfa71a85dfec6909cc9210d43d230b66bc82713bc2857

      SHA512

      5bd8324bf22ace3691309c7b7eef07d9963503fc04b7b34bbeaee318928dc6cb5f97973ebdee2567432e4099ac1952fedd9b2eeb37b06342b57f257149b8d568

    • /data/user/0/com.zhiliaoapp.musically/files/keva/repo/firebase_repo/firebase_repo.blk

      Filesize

      17KB

      MD5

      81a142d48dd83b41cd1780337f557507

      SHA1

      4acd3473fe1aa1dd17ad91288a13ae69c6a6c27b

      SHA256

      79d6088e2f8b0875cdbc94376f6fbb3ec2b18d7bbd48a5887b102687e580c4c3

      SHA512

      e2b83134e29895e66b3a2d69002ea4ad1df94a5a74eb144cf77a0c1797b569e1d8c8bb70d36bf3fd11804bf175bab1426eb53e4cda1a03573beefaa7b2a4626c

    • /data/user/0/com.zhiliaoapp.musically/files/keva/repo/first_time_isLogin/first_time_isLogin.blk

      Filesize

      8B

      MD5

      d46bf94e9eb1d22281a71504685082ac

      SHA1

      e4e0629aef7425ba63e897bc471f8625de44edd3

      SHA256

      2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc

      SHA512

      68a1a1fd4de784e3a2e0e956d0a63ac4ca540ef90e7fd9a2ddc92cf68e52e29792db64f6615054a6e5460467f0b7abe055c899136d98ce6ebab3d580bc55ec86

    • /data/user/0/com.zhiliaoapp.musically/files/keva/repo/helios/helios.lxi

      Filesize

      24B

      MD5

      50ef9f5a0f3fc24b6f0ffc8843167fe4

      SHA1

      cd9b2558bcf52078c64242e751017419651181d9

      SHA256

      47f7aa1df82bc1b22c8bd4f539f704ea51ca37b8260f02129c096b736f86f104

      SHA512

      351a8597cef0227e433991befcdd14bbf304964161fdbef54d74ea2ee7ffc1374ed4ac3cb5cecf7c3812eab0fe75e6270bb8d6cf790d2eb94f4043c6a1761707

    • /data/user/0/com.zhiliaoapp.musically/files/keva/repo/tablet_cache/tablet_cache.blk

      Filesize

      46B

      MD5

      f9b7c32a9efaf166a301db1baa991248

      SHA1

      b0030c1dd14b6f2b5b9fed4a4958780d82486959

      SHA256

      3b98db52e6cdccf92dd4af7729fdd808d70f7dd763e35fb7f92dd90a3def6c7b

      SHA512

      917567706bed0bbd3bff5b6b7b9a775dfe78e758439649383827e1ad97c99060b03e8cbd5c5beb77cee8cf9216dbb13b73d36bf13837c1a70d57dc7b06857f60

    • /data/user/0/com.zhiliaoapp.musically/files/keva/repo/used_app_duration_and_times/used_app_duration_and_times.blk

      Filesize

      120B

      MD5

      ddcb0c750b9850a4a8b343199a050707

      SHA1

      0f5fb5120e48ad09223f9387ba30d5c5ec20bd66

      SHA256

      a27b2338c8aec7f71f3638e58e71d348f58079fb5955126061f724fddeb1285e

      SHA512

      c668649542b692924e443101bd72c9d619143a23edde7d3f9d35290239dfdbf09020befc2b82c391e62bd219f41eb6c59209543520ff129eef16a78d70d07492

    • /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1689135254341-1689135256002.allData

      Filesize

      2B

      MD5

      d751713988987e9331980363e24189ce

      SHA1

      97d170e1550eee4afc0af065b78cda302a97674c

      SHA256

      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

      SHA512

      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

    • /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1689135254341-1689135256002.ctx2

      Filesize

      831B

      MD5

      3a2793efb984a13dde8c1aec5007c3a3

      SHA1

      4f9593f1c550286f25ee8ad87bad0449a2387973

      SHA256

      f8941002df0f07e3717a4f88f8ac9536d23c63454c103d30f99ed0e8682dc3b0

      SHA512

      8d9bf0e1194f5b99c4839c92601c565a9c05ca28cf2bd31c7f76fc69a20a8cec1444f9de6d6f3c7ee4f3944fad20e5a6ff3c700d1b6500b5f925ceaaaf951dd5

    • /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1689135254341-1689135256072.allData

      Filesize

      2B

      MD5

      d751713988987e9331980363e24189ce

      SHA1

      97d170e1550eee4afc0af065b78cda302a97674c

      SHA256

      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

      SHA512

      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

    • /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1689135254341-1689135256072.ctx2

      Filesize

      831B

      MD5

      9aafaa619481c2e66cc327265716a813

      SHA1

      23d7354de352c21de459319c16a33390a3331bde

      SHA256

      fc76b507329e7a2ed7f61bb210b53596fd4614b078998004e23e04f541ee5c39

      SHA512

      536c20e8bb465081ec6b7c8e941ad731ce7d6c7d9908743d579fa46585c56b6b7e7a228ed187372c07239e91ad28e264923fd2741013c341a68c0330ea786c06

    • /data/user/0/com.zhiliaoapp.musically/files/npth/configCrash/configFile

      Filesize

      3KB

      MD5

      8aeb8b1067c806e1509ddf9751cf736a

      SHA1

      7dc28aa26f09b576b5f432082616042ed8474ebc

      SHA256

      cec7a2e587f88f09d2769a1b7ffe72a8aa8b76998fc42ca1bce079f59a1a7b80

      SHA512

      da85054d050622046eba9364befbf63f9ddd23fbf34a2735e0713c28be36c42917e76b8d448af8858fd7cd47a71c0fbb5b7410eccc03eb7fd7e4b3c762f6e0b4

    • /data/user/0/com.zhiliaoapp.musically/files/npth/configCrash/configInvalid

      Filesize

      53B

      MD5

      7edd08cbbee2ddf60551d84d1a16f0d4

      SHA1

      0642657cdf47c4b7a66e66e37936cfa25997c602

      SHA256

      aba1e18ae4807b5e7f552a9c66b80fea861712858b1703b0a84f6db7f6856a5e

      SHA512

      b761c1c00e734d3ef9abda8f9207a7195537fc334d05e5b8d97999421169f496b5f1462ecb52ede284bca72397e6082cae2624e219734af53158f1ba6fefcbf4

    • /data/user/0/com.zhiliaoapp.musically/files/npth/killHistory/proc/4668/app_start_time

      Filesize

      13B

      MD5

      1507faa913cb258f9b70a0c5f89500eb

      SHA1

      19b07a61f274cbb4295b0060f8c314e3e0baa72b

      SHA256

      127e8f670e339b230f08782c956270b0b7a2f6f73415dddaf6dd25c4f2e4d350

      SHA512

      fe4b7253ef9537068b0a8103d271b78b2a443281f0f5ead9a5ae30cc8d01a8da1cf97a59278fe710e4a07adbf8e9361de72574a3cade6bf890f5f3b0d2dfb610

    • /data/user/0/com.zhiliaoapp.musically/files/npth/killHistory/proc/4668/cmd

      Filesize

      24B

      MD5

      50ef9f5a0f3fc24b6f0ffc8843167fe4

      SHA1

      cd9b2558bcf52078c64242e751017419651181d9

      SHA256

      47f7aa1df82bc1b22c8bd4f539f704ea51ca37b8260f02129c096b736f86f104

      SHA512

      351a8597cef0227e433991befcdd14bbf304964161fdbef54d74ea2ee7ffc1374ed4ac3cb5cecf7c3812eab0fe75e6270bb8d6cf790d2eb94f4043c6a1761707

    • /data/user/0/com.zhiliaoapp.musically/files/npth/killHistory/proc/4668/procHistory.txt

      Filesize

      42B

      MD5

      19056796b9e6046e975fd249118361ec

      SHA1

      df89f518f38ac6f17069062a0ce9990290ee050b

      SHA256

      88c53f4cc71506327974c1222f3d3e83463f072c3ade2ba8b90a8b36ec8e1b46

      SHA512

      4ce183c1dbcfc66075385437fa5f606a659d4e4db8539019895bd5fd403fdcf99cc74cd74c0141ca336ad2a7456bf3e172f6f5a57d3e0bb020c8500f85138d38

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

      Filesize

      722B

      MD5

      feb7cc3d97dea4cab300b22a695176cc

      SHA1

      330fa3f49933a6037e08ed560c4ae99f79a326af

      SHA256

      11dfdb67ddc116dc7d377dae9ab1a728e846a1483cefbcaae94099bb1982e66d

      SHA512

      1fef4ad9555ed89c4e3708c67eb6a4d3df692fda64c1e96f4a7b247fa1b3eac5e4126bb177952063f07c28f2fc90fb6bc249b010bb773a3e1f8416785d6bd3db

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

      Filesize

      818B

      MD5

      7bc730068283bb9fc5f906a3c31bd919

      SHA1

      2202efafb3f2a5731aeb38c139b5466b54a9d811

      SHA256

      b0e1ccf68da94801d92da623ff5bb7f8282f480ee1f7faad84583dc82fbafa54

      SHA512

      bb58c2901e999a3bbe080213344633c3019939f8d4d01c23dfff5c56d35c890beb49abbbb14f37ec315d3b31b359c393004b72ff03b17918b413dfd62f7f597c

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

      Filesize

      908B

      MD5

      a834d95f84b2c4dc28f6374f6e5c3552

      SHA1

      bab10e4024df45b30f6b56d3da4e30f34442059a

      SHA256

      00fa204e7b0df8a26c0f2fbb5bab246ed27fa909986acb7d00cb07ff34c90a00

      SHA512

      4486f203d370dcdcd942fe2947f065e2f6f01eefbe7ded830a744c2e431aac06f9986230c4b9811495e1b7817c511bffd371c0e6221c1d0293493cfa521f1d1d

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

      Filesize

      1011B

      MD5

      b9c4cfe5b2501810f072d04a8dbe6bbf

      SHA1

      b09d151b154bc06514122e67eb1a5815ed1ac80a

      SHA256

      1dd41b6704f57559f4202d47326d94e2ff2a7c442cac867714dcfba068c52d8d

      SHA512

      d97d592596fe3fe2e20a2c869613a68820a5de75688f7c6791168463b3258c297d7278cebe48b030a8858f820888f7cb2c068dd92424833c440085fee7aec946

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

      Filesize

      177B

      MD5

      1da39129b48bf4c3ace5ac68aff4fb24

      SHA1

      0e73a21bdee5e0274d395d2537ffd03a6d947620

      SHA256

      5b71e15b3d67bfa0052122222d8c3fc1a21813ce82377a805b5230781aaf7c41

      SHA512

      75db7db699a2005544a2588458c8de45367a01c8779022ea468d38ea74d803a2c66148e355fca1a8dd0e66851e79d31f92c06d3cf830165dc5f7747c8000823f

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

      Filesize

      543B

      MD5

      6739f1bfca40c00c38a48d83990c1211

      SHA1

      0318df8913ac5347774f3ec4e6c9188a0392cead

      SHA256

      7db8d040f5cdd2a538c004a70b1f59fab2fdfdbaafb97bbc5f59437d0299c140

      SHA512

      93694e56b37703a739037b7d46fc6720b6d972a640eb9c2734e8a419d5eb279b4934a88c634b7c9797ca2c13989a1bdd24549bf1e0f64155ec29bce74c5efacc

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/SP_EXPERIMENT_CACHE.xml

      Filesize

      136B

      MD5

      b63f0f4b33db794e21a8622e47d8ae23

      SHA1

      78a1caa4989222ad7d390be2b22b115a79869ba0

      SHA256

      70bc7085a1e1801522e300467a6ca5ced14eb16ee38ea5991fbbc209f7fba850

      SHA512

      bfca9bbff6a720bfa57620e8cf347422bf59aafa4961486273cbff9ac80e9c9204a546b7a4fdd8cfba9f5584aad1bab9b90b024f6e2cffd7d20f0d167af4a25c

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/aweme-app.xml

      Filesize

      120B

      MD5

      02cbf9d34e6b2f4cbc32f272233e0be2

      SHA1

      0962ce277bd1028369193492dc71a1eaa01cea99

      SHA256

      080d0a4422b66349430de81fc78e429b4a2eba3871a9b587a6bba143a4e426de

      SHA512

      ab43fbb347340e8fc992e8a99f137d85e2f0cb8a7bdfbd773403a317db4e5c7e79b5a47dbac9a55190fd05daa70be0e1f0fca70146c35ce05923bef28e8104f9

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/key_language_sp_key.xml

      Filesize

      116B

      MD5

      fa22ee6bbe623af1507f03bd6d92fad3

      SHA1

      f7629ccf0ede95c044269c748a0a839d907d782e

      SHA256

      64b63ed9c08e7bc28931f6ebcaa1bb87da32a99089869a7ccf3b45408e893fb9

      SHA512

      a4f5dddcaa160763d414ac0990c33a15a2f1ac9a1713187f2f51422e8603a4fe3e1ad030a1f4c6fb5afcfd8986190f1d62f19f2550287e316c8fc42b695115f9

    • /data/user/0/com.zhiliaoapp.musically/shared_prefs/tablet_cache.xml

      Filesize

      105B

      MD5

      67f7fef1278b404a58f59543b90fce03

      SHA1

      f76f903aea5e68ad5217a81539389df7c3409640

      SHA256

      44d4615e8e6a115b26f2851d0f4aa779d46bfd35e9cd78dc87c99a6fba5193ed

      SHA512

      532b823165a50f77c4e8db858be09b873a316c22be6f8ec0385871c743760e43ffeb58d2f2f252721da50a646f451b303c3293e451b8d55d57f43339bafbdce7