Analysis

  • max time kernel
    2780378s
  • max time network
    162s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 21:34

General

  • Target

    92b0bb677fd63b42b99059442bb3d2b4a32873a9b36c0dbe84e5f031537ebb9f.apk

  • Size

    9.1MB

  • MD5

    aad50b0b6a6d9022348012f0fb500bb6

  • SHA1

    5d3963ca6c96ed0a8f5c7c450d67f4ab49ba0b73

  • SHA256

    92b0bb677fd63b42b99059442bb3d2b4a32873a9b36c0dbe84e5f031537ebb9f

  • SHA512

    9f4a4416c105c4f9130117059c1baba6a060d0a77e66b6349b26872f60ce5602e9d0b445dfd2bce5a6c81d875008e3404b78b4b2aff43cc8f7729a342681bc86

  • SSDEEP

    196608:Jeyw2gULel2AqWrX2lDap3RhsGyRXbwDqZkey:3whEel2vO3R2GylwDq2d

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.taptap
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4246
    • logcat -d -v threadtime
      2⤵
        PID:4477
      • /system/bin/sh -c type su
        2⤵
          PID:4498
      • com.taptap:update
        1⤵
          PID:4350

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.taptap/app_crashrecord/1004

          Filesize

          219B

          MD5

          6b63deb15ecbca8d7756a1e2964a373f

          SHA1

          7e3366d9e5afad02ff0156d6dd4c567fcbeaac3d

          SHA256

          3438fc489f8809863c643dadc0c42ee94c620d504dc0d192a1411ebd47627a79

          SHA512

          14be6aa3d048073fd8258ed8901199b752956c883491166f01ee0b5f644f7d98ef971bdbe1c52d6321dd57ba09c915df0cbeae99be609bbef78716eda4c27399

        • /data/data/com.taptap/app_crashrecord/1004

          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

        • /data/data/com.taptap/databases/bugly_db_

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.taptap/databases/bugly_db_-journal

          Filesize

          512B

          MD5

          2fb949791cf849f25248e3d1cff0ae27

          SHA1

          11a7c197d667c4ffe1d4c3724d18933f8d5799fc

          SHA256

          957d7e0d29b462404a9ab39158950d28c3124435a7c2b2c9415db34072277069

          SHA512

          102a85e4bc46413fdd7050ef299af35186c613de6081e4bb1696bea49ded7ce9f14631a385a77e5391c4d775a3fca064ccdb620510c5c6b0a13cf93b2dc9b7ae

        • /data/data/com.taptap/databases/bugly_db_-wal

          Filesize

          16KB

          MD5

          ee4880e29a2eebdda6a6fb01cfb4d443

          SHA1

          b7070d0cc29d71caaf5313c9dad67deafb7fd376

          SHA256

          e0fa26c943805da76559d94b8b520fe23daef168192ff42722f757dec1215eea

          SHA512

          846f887f144998b1fff007152d75edcd844aca01b8493ebbd66b56e4c21206d39930b29a9ae0d7ff6d2a973c38afc50561f65e4a6f6c6538d201a87adca144ec

        • /data/data/com.taptap/databases/com.taptap

          Filesize

          24KB

          MD5

          c5b7a740be80f69f8f420578e7e35ac7

          SHA1

          5f4ac3c8319a95fb518abce237c59778d5c9d20f

          SHA256

          94cda730884980bfabea3bf1b4115ca86a33d7ad80c5d0a4c3ac2f6f126f9fc0

          SHA512

          aa0fca069022ec6f05d928442ce7dce8f8bf415338631c764cc97a55af341a5e4c53fad398979bfebf7e9f09e7ea8d61a53b328f130231b0c79efcec2d243d16

        • /data/data/com.taptap/databases/com.taptap

          Filesize

          24KB

          MD5

          a3a8b4d6e3cd7a7ff58fb5dd16f32fe3

          SHA1

          0a66b42dbb266346dd5b93b79361e65a32259296

          SHA256

          907549acdd920e3f56281542581f50512649a276081f92e509ac03e58551097b

          SHA512

          bb91e3969d71df5bff5c1678e4d7edf0a154966264d79582f219252b7c831afd5e9cedb058b375cd3d9544354635ba1cb87e89565491d82d9af3bc48c5dad7ab

        • /data/data/com.taptap/databases/com.taptap

          Filesize

          24KB

          MD5

          01931696c1e195b55cd56b993a978e89

          SHA1

          6bdaeeb447974dad4e6a99b6374c50530e0a0ce7

          SHA256

          1aafa6b9a5b5840601c9374b080fe135a9950cfe8d27c94314839d957be4a499

          SHA512

          86646780aa43c64e68f1c93991185d897d163788be8de7f3b2b0e11335af5e960ca8b99661010e3dd3c3d114591ecb802fbadc22c94ed6304c42ebbfb8c99561

        • /data/data/com.taptap/databases/com.taptap

          Filesize

          24KB

          MD5

          d89ebe727f62d7da4be6e359af5350ae

          SHA1

          75ac99e1e09c8b704d0e73f89666868f6e668c04

          SHA256

          4a63e8da6b0bff591259b45903c1711c4f3f819aa7e769dd470f6f15411bf872

          SHA512

          2641a031cd7e5274f28f8554f2c2649e576bdccb5060b34331e4bd06b3e4a24ab29217f959d830661c44b66fc326931d91854c0510b22b0e654fc504d9a08fbe

        • /data/data/com.taptap/databases/com.taptap-journal

          Filesize

          512B

          MD5

          083f584519f312d9f86abec681816347

          SHA1

          1b02d8b2b70793855dab8beb4bf75864b2963813

          SHA256

          4e54971484f973457298dc5822ddf2729c39975d161e77aa02e5c581bd70bc05

          SHA512

          66698f82ff9260bfde37544d8346bc6f6420dca362dbc4807263a668463f9da4933a1d13e04f0995a99c580bf467dcdf777ad9c02520b778d07850fe463bad50

        • /data/data/com.taptap/databases/com.taptap-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.taptap/databases/com.taptap-wal

          Filesize

          48KB

          MD5

          0d90fdaa44aea640b5e7d94d6397ece6

          SHA1

          5af227cdc78078d20b44f9c2fc94a4a996a4131b

          SHA256

          53dcbc21e161c38874b928f551058e5fa32c1a6fab1baab3eed6b59697e17f9d

          SHA512

          56c8d8dcc2e73675c8a935d7605f99d249f07550fe6e912d0a776730bbdd92b8494ceb0b07a12fdfae4e9ce6788a454a9e42cad08d7c1233216a630fe62023c2

        • /data/data/com.taptap/databases/com.taptap-wal

          Filesize

          12KB

          MD5

          01a1b95f6fa6d54941235b4dfa69524f

          SHA1

          c069e91ddbe6ed946fc965f35d1a652913c92f42

          SHA256

          7c2667a8d7ee1209f2c9f74adde4701422b1b8b070061b5b8e8191419c85f243

          SHA512

          ab9d90a22444af188129e46915d9c1e9a0b367bdda07a1578437ee7f7c54a547a88f808678c336beb380ea6d629144f48a1d03e0e0431de606a216bb941d6857

        • /data/data/com.taptap/databases/com.taptap-wal

          Filesize

          12KB

          MD5

          c50886f4f529ee0edf9b56a9510f048e

          SHA1

          08a5208828b7e12ccd9296d1482692271f1f50f2

          SHA256

          0b9cf4fd82f65b5d68426254c3ad73eda8943536c57b3ec28d5f54858f9d05b9

          SHA512

          077921865c8adb715ddb76514f30c9ce2f91ba5d4866839d116d77ea06b1941d6fbb9d86615de8250519402e4b24c00c241301a6c18da9e8f027dbb659a65334

        • /data/data/com.taptap/databases/com.taptap-wal

          Filesize

          12KB

          MD5

          d55de84ba8ff01e17245e5aeacc524ba

          SHA1

          61193b08f7063f3ea33f127722db896de260fe35

          SHA256

          a001954112f09990dcf274ea637b367b23705a2c9a81d8e70852a2c636168ac2

          SHA512

          5d82d3696a8236da8c2875bfce21555aeafd8482fe5dbae656305b5bde077b894fc95bbd0812951bde5b25047fde3ada8c27ff30619fd42ed99feaacf7613455

        • /data/data/com.taptap/databases/search_history.db-journal

          Filesize

          512B

          MD5

          1913588c3455b18b35783270877fc915

          SHA1

          b3bc951ddadd911e60504dc46a9d72dec6c002db

          SHA256

          c22a5f4629185a12c698740c76af757a3c3840ca6aeb59649161814d74cbf17d

          SHA512

          90dd9c403191f4b63eb2d2f6f97be62d73ac204d0140b25acedef397b664c10b2deb332bfc54e2d15fffec3d3d2b51446b34e33b26ad59c4aa96358a9f73ce19

        • /data/data/com.taptap/databases/search_history.db-wal

          Filesize

          20KB

          MD5

          42b3062c8b1e2cf134ab32b599728edf

          SHA1

          8696b8e964346e6f53c41d958e0dd79e8b12fecc

          SHA256

          810a58956dc51947634b8fb96bf514b50c6f21cf59a0275f8cd01579f57ce561

          SHA512

          d8dd1a2912e381aedce8d7f52312d4528bb872dd4cfb56513db3ca161b3f82fab084306ae835197096a9e4161eef916860e7aaa89c6aae4789e0f07c8bfa1de2

        • /data/data/com.taptap/databases/taptapdownload.db-journal

          Filesize

          512B

          MD5

          bb21991c353bee7d2da83111f582b4ca

          SHA1

          10813f75a2b3bf947475e3a1fed09658babe00c1

          SHA256

          b6fac4ec8f747b042109323fac3abfcb3d92f148a5d0022efdf4b62c257cc903

          SHA512

          e30465ca434d84342d6fa0b6e2ae5b031a2bcfb082361f2dac693bdd6b21bc793ce028e4dcd4e0504eab173488b19f78eb0fc94cd10f7c082ed5356e494e262c

        • /data/data/com.taptap/databases/taptapdownload.db-wal

          Filesize

          16KB

          MD5

          189d915a046880a7cdc2afa6dc9671a3

          SHA1

          cc56aa5e4878ac46abed5b22bf102bf5fb1e64ba

          SHA256

          c92b4070d3acb15afb2bbc9e277704408cdc32a369496d58a257e94d5811d6f1

          SHA512

          4b48cf6dd560a23abdcfadc7fc913708ac297cf780743f5033c92f0e894ff698de5d7a17f4a684757183adecb520fdfa37966b265f20e50d0816cde3f39f3ee5

        • /data/data/com.taptap/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          f537a2dcc84382ee4cc2557b1ce9c332

          SHA1

          15b9fb7dd9837a5a71ae62044d68781fdf576918

          SHA256

          aa2d7afacd0196f4373bd37ee5b99286d0b3413a58825b39f88c7614647a0cd3

          SHA512

          ecb5fb20f2d81c23ca78f698fb32fedc9be3cdd025d6a95da71382c9c8a937601e9d7b42dfaaa6b7158450b3ecc92a935995eb9fedf63f7ea85f6953b0ee26ec

        • /data/data/com.taptap/files/umeng_it.cache

          Filesize

          415B

          MD5

          5e8ec89c660527b90d5e4b6ad8647c2c

          SHA1

          e118fbcc2ab83be1bad4166ac65bba64e6accf2a

          SHA256

          ddb79d7609e5bd4308b046f42203664d66ee11104b35b39038d60635111db70a

          SHA512

          740f10958426513645237b73dd7a3cb2c66773603e0c9c723cb4959a9814521e10217d6d2ac4d0fffd1540d49dc484bbcd7f631aa265f9c66692b7ad2a72356c

        • /data/data/com.taptap/files/v3cache/6b1e74900bd9caac562cc84e85b33b34.0.tmp

          Filesize

          4KB

          MD5

          bc429c77a3bfa0359c1a1e94dd6663db

          SHA1

          1c5355da0be559f2ef5db00f2f3b7566eb06ca96

          SHA256

          9420e36d5ba9e13ca96f598cacd259abb49f1f1605cb7be0a1cdb881695f1be0

          SHA512

          a902e0ee5fe4cb4d9ab15d6f1b718a7dd884f4d2b48d061c591b1a601def385588183aaf26391ae073c5acef68dd76578c481b0cb775dc27546a6b395bcfa609

        • /data/data/com.taptap/files/v3cache/6b1e74900bd9caac562cc84e85b33b34.1.tmp

          Filesize

          18B

          MD5

          53af239ee5d3e261545dededcb6ffd57

          SHA1

          04ca7e137e1e9feead96a7df45bb67d5ab3de190

          SHA256

          99eb12f2ab3c4866a353e098ffa3cb7a967e617c49b98480394ec5d8ea92b094

          SHA512

          c734e4a5ff5d335a91518dbf47861bdaf8012af49371dcd2e3350e269c9a5a1cc094114d17c4f5b053f3757b4b07487ebd0d309c91ef97acf4665cc5d5c9a2d3

        • /data/data/com.taptap/files/v3cache/74cb336e8c8c94463b9e907357f99a6c.0.tmp

          Filesize

          4KB

          MD5

          4b1d8048674e0cc25002eabad75bc3a0

          SHA1

          5220893d3de308aea58e500ed37bf99a032e7b92

          SHA256

          e84eeeaee7d0768950b0492c31a989635c8cad4978685f7f8332055fb685404c

          SHA512

          76b5e2f7ec3ca07eff2775c5cda2856af805fbdfddfb5cf002c0198689ac8e703a45892ae14ec83e9133e81350dfd7dccc07fa093edbf9b7962a8c9c1374b791

        • /data/data/com.taptap/files/v3cache/74cb336e8c8c94463b9e907357f99a6c.1.tmp

          Filesize

          20KB

          MD5

          7b7c43d0b6829561e7a4f5cee4d93941

          SHA1

          fce37b80425826087a7f48fd840c273a12dfb882

          SHA256

          ae85eda53f1f58eb078400f786555919fefa272985dc4636bbd144c5b145f294

          SHA512

          320b0278fdf88e575ad15a1b76204e194622c0b2e2854f1106559487ebd4a4dc660476389685eb30f3082fb8dae121ff09064539857497f072ba9348ce5f7dd5

        • /data/data/com.taptap/files/v3cache/d4f3ea5c41076a8db9c3151fbc48af16.0.tmp

          Filesize

          4KB

          MD5

          1fca975132b390ec5fbcedb38226cb03

          SHA1

          443be13531e91eb751dabd4e12d5619e5b686a60

          SHA256

          863b4e08c90ebbcb1b93f0ddb2858ffbd4f843c3c15798baec7b13426943ec04

          SHA512

          e6fc777e9cb8f9af3368d3c5a2dd3144f40a7b86b44d0643a293e723dc2b91aa2ca2aa02b9df6376d27183a7aeb5a90fee727999c8b35c38cd54379eb2c00bca

        • /data/data/com.taptap/files/v3cache/d4f3ea5c41076a8db9c3151fbc48af16.0.tmp

          Filesize

          4KB

          MD5

          47dccacc222ff0b694ab163a1dbc5f77

          SHA1

          9db559427a202fbdf451df057bd4af7ac15e1ef7

          SHA256

          01704e681ac9c5f248243e1d1b6d55c52443532730634385b23235184b0ee0ce

          SHA512

          d0a2abfeed0f8b751933464fc2068f4470634590c5abe7002aacf2c8ffea495a88760138c42584a99af4cc9fb69cdcf2f0acb47986f0d60a7393909756983da4

        • /data/data/com.taptap/files/v3cache/d4f3ea5c41076a8db9c3151fbc48af16.1.tmp

          Filesize

          15KB

          MD5

          2f22502066d80175d748f13b9201126e

          SHA1

          dd4ad8c408edaa41e595e6e2d403276e40c61852

          SHA256

          62bc8cd2496035f5f52d3fa1e4ad430e4e6d8aa1bcf4929aeb9d91d763a138bf

          SHA512

          8eebef69de5c43680ae263c7fea75347ae533abf07ac659fdca804c95d7f677b70e90af075ec18506ec86779accfcdba9809663991a694d81897a9d24fa48fad

        • /data/data/com.taptap/files/v3cache/d4f3ea5c41076a8db9c3151fbc48af16.1.tmp

          Filesize

          15KB

          MD5

          ad0706a3e17d270ef9a2f3e6a66db4b3

          SHA1

          9b813a45dfffa10bf855488cbe7dbac23353340e

          SHA256

          26d694bddc701664ccdab73c4a98cc4aff5ffbf955ce62f256011d9d2085a7b4

          SHA512

          1f916b46ce95ac35cd80d9ab91b18cf3e57a491e46760bd03ccaa07936621fa796f58539a876e4e644cd59cf7527c0d4f4024ca8a5a033fe6153bcf73d9bf2b9

        • /data/data/com.taptap/files/v3cache/journal.tmp

          Filesize

          36B

          MD5

          37e8e716e0e2f4a0b05cd9571d95b84d

          SHA1

          f8d068f6931707bddb8cd69f706f2224ad1fea3c

          SHA256

          7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

          SHA512

          e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

        • /data/data/com.taptap/lib-main/dso_deps

          Filesize

          128B

          MD5

          ef6f0e653681b8082c1d7db41988bd28

          SHA1

          09cc1967e9a793d32170113b932b0c070835d28e

          SHA256

          01c0c653f45348432f2bb3a19a5f76405f077b23ef4500f88ae78452b2521ca2

          SHA512

          836ed1262df4b2e8cad658a52175d133d9ececc98407bf535350e155e5b8a6a3ba8b37a24a9d21ecc9a5c93359a3fe4d2fea9ea878df79cc176e87cafc604ea0

        • /data/data/com.taptap/lib-main/dso_manifest

          Filesize

          5B

          MD5

          c06857e9ea338f3f3a24bb78f8fbdf6f

          SHA1

          c5a0a2529d2deb60fec041b4fbd722a2ebe31702

          SHA256

          957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

          SHA512

          29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

        • /data/data/com.taptap/lib-main/dso_state

          Filesize

          1B

          MD5

          93b885adfe0da089cdf634904fd59f71

          SHA1

          5ba93c9db0cff93f52b521d7420e43f6eda2784f

          SHA256

          6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

          SHA512

          b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

        • /storage/emulated/0/com.tapdb/tapadid

          Filesize

          75B

          MD5

          5be67a6ba2ae476d53bd32e84a881f4b

          SHA1

          e79d014ba3f9b80ba6ea4ac732564a341b6add8d

          SHA256

          fd9389447d7e65d0407b026fa2fb7fc5effb6139c1a08580d5d5d57c60dc2e81

          SHA512

          833b9dd0cb2a09544fdb383ff99fade488f068a0d3d2a0e58fe5391b1afa0637b188416865b823214623355cf53fe988a83efcd088042b900084fafe60e2d809

        • /storage/emulated/0/xindong_storage/com.taptap/__TyrantdbGameTracker__

          Filesize

          282B

          MD5

          cd0c2e8381cdeafe7567319e23db639a

          SHA1

          64eaf7f778d867d27c8b50bef8ae7fe1db13c86d

          SHA256

          c27faf247fcc6d513970ab12b2dc41ca3b737c32b4605a5f7e092746743f5f88

          SHA512

          221a3e86ba59e7208ae165760f7bf24afe1c5489292b61b165f1a0668a1539fde1a60767e13f8a7f023ddce6146d7f1c19b5a9d7c95179c204bf8b32d5ebf7c9

        • /storage/emulated/0/xindong_storage/com.taptap/__tyrantdb_sdstorage__

          Filesize

          299B

          MD5

          6496a1ab50e48f39007fa48c20df09cb

          SHA1

          68fecc57bde17a9be8a83da32f696a033ea61ec1

          SHA256

          1b6520dbc9eadf636478727c81498cc8badbba478a6257bcd594077a3d2c6883

          SHA512

          2b1fd95e1f4b68cc1efd98dc4c26890bbe67ffdcffa91ea9e75f9729abfb0a7b50c2077be348290e694d4a691946f19663beb832aa7b035dec94c0bad97e722c