Analysis

  • max time kernel
    2879814s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 22:53

General

  • Target

    9ad127ab1316822eb9a95f3ecf5adca7907b2a79d4d737735abb62d3d86ed3d7.apk

  • Size

    9.1MB

  • MD5

    b96be05189528a902ce8df0b350d2797

  • SHA1

    6eea7094be463989b07382aa329e52192fa519c1

  • SHA256

    9ad127ab1316822eb9a95f3ecf5adca7907b2a79d4d737735abb62d3d86ed3d7

  • SHA512

    e1919f4f170e8fcff026c3453fe380870538ab4e89d41f7be2b021bd3edc31e5be06c7eddf974e22bbf6b4cf6f4dbdd8cb2d849f42f2d61e12ae8742e57dd8d1

  • SSDEEP

    196608:b2yU+duWVNrr8Vfx+jtMfaaQ0MlGCq3JAxfwuRXVwDqQWeI:btHuWV9r8V464lAeHwDqHl

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.taptap
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4257
    • /system/bin/sh -c getprop
      2⤵
        PID:4287
      • getprop
        2⤵
          PID:4287
        • /system/bin/sh -c type su
          2⤵
            PID:4375
        • com.taptap:update
          1⤵
            PID:4342

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.taptap/app_crashrecord/1004

            Filesize

            219B

            MD5

            be6527aaa2e71b70fe27dc80141bad7e

            SHA1

            9a296213809a01f4f2d3a3cb8dc244b636779aaa

            SHA256

            669d34cdd739d958829f3d6f46d5b9eb22d00ad602c6d043b87c761be344e977

            SHA512

            0c08a7215b91d400b5495ce62505b4c58dbe5088ed84e18ee630e718df7f87772d35ba7a4055fe1e339e5b29ccc101740ba49968fa5a874f4214d8eb368ac451

          • /data/data/com.taptap/app_crashrecord/1004

            Filesize

            58B

            MD5

            0d210bfb2a0e1f1b4c082a6a0f79de07

            SHA1

            bb8ed9e364db79d1d9f2fcde3f15091893222faa

            SHA256

            988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

            SHA512

            536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

          • /data/data/com.taptap/databases/bugly_db_

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.taptap/databases/bugly_db_-journal

            Filesize

            512B

            MD5

            a16239407ac8db42e605f8c3587f98ca

            SHA1

            3433e2c8e5fec087b84502d96f0b92d0038f6546

            SHA256

            f51d587be9434be94dd785ecc6066f03b7030ce5bbf08912e726e0776b4371e6

            SHA512

            e53d3a03e6f07c79532cd35aa0fe7fa27c18bd00bba05ada005aa829eb0758964c2a53d058ac4c3cf871220ffb0fabb69961ef9437741e172f74c5edb1ad2598

          • /data/data/com.taptap/databases/bugly_db_-wal

            Filesize

            16KB

            MD5

            dc9bc6bf48734dcc8870f1ff6b71a786

            SHA1

            735b4db2f4c8f80f3d46b3ba6434e8c72da0074e

            SHA256

            4cf38c9b54d39cf5770f872683a8934c300a4d6d58058db9ead47f57ea08d2f7

            SHA512

            ce5a05c8e4da70ef6bc199b5ba75c0f876159bae6a45868ce95d5aaa9aeb7bca7f25216254ff753b41eb604211a5b316ef5fc97889c95f2b55c011d5bd84d4d9

          • /data/data/com.taptap/databases/com.taptap

            Filesize

            24KB

            MD5

            2b90f3b8b712ef7cd13b2277765cc478

            SHA1

            cc36db398fbd1676cc54ffed2dbff84296e342be

            SHA256

            639773fa451f7955a58781ec05d1c08c0c8e4adcd628b3dc9615775e2f5f9320

            SHA512

            cc53eb9aa78f6d6d16c3bee96d92e511fffd2a1ddde1b32538c0d05c19f4d8796987e25945a6ed93fe560f2b682131ccd4d2dbc71d23fac22150d7436e85862b

          • /data/data/com.taptap/databases/com.taptap

            Filesize

            24KB

            MD5

            9dd6d38b69630cc9180c4cd58dcd47ee

            SHA1

            5d95ed4cfc9f91873aca2c1420ff64d3c2d02c9b

            SHA256

            814175b5b270bd827c21912f27c4a3277e19011c36e31e0568dc99cbc95aabe7

            SHA512

            a36f2f2851ec943c5d673d48ed16156a16c2d93207cd2e80379ab830259dfb3054c55d6f15dab1878d3567f794b64c64238e29dde89e273676f074442b8ed692

          • /data/data/com.taptap/databases/com.taptap-journal

            Filesize

            512B

            MD5

            72612adceb2d54208df534730569ce7f

            SHA1

            d191f55013edd06310bf8077c8401c44a4e11aaf

            SHA256

            384a975bd39fd1e4637052c0b35dab742c3c234328ea1ae667c40fa067933960

            SHA512

            4f04453c6ec365700840f5ccf5eadf8c2d2bb6694e61ae409f747b12c6446609dbbf311605defa3e7cbe7bd9d1ddcf7ba6f8bd677f5eb88c3ebc769f16231431

          • /data/data/com.taptap/databases/com.taptap-wal

            Filesize

            4KB

            MD5

            68c84ce2de12f1074e1ba7676066daf9

            SHA1

            485e8fd47921c072c586d860daf19896384a3fb2

            SHA256

            27b067a95a1d5b1f52dc251f3d1cfeb9ba50f6a9ed11ebf5d75098ff0709b169

            SHA512

            dc7bd375b5eb4613eeda0aac583f16bb654511c18c794c0baa99a8ee0e70ca1a3c34241bf5364b48f509ed1b718ea5781cc21a5992fec9eae2c126bac9444dd5

          • /data/data/com.taptap/databases/com.taptap-wal

            Filesize

            12KB

            MD5

            d3e88259e53d9610bead3d71110ff05e

            SHA1

            7caf6269c3df99eb4c2bbc187fa0501b02453db4

            SHA256

            b78c12752b2b2cc69356655e3640e9e430fb66ee8351c07f15f7c36368cf0b11

            SHA512

            cdcf2cd6b34e8228856b45ace88d3fb83e073c8274a33c6dcea05a057548dcf2f8ddb8f4dd4cf59de7889189b3267030ae6e220ca2f03ee1a00791139ae59e35

          • /data/data/com.taptap/databases/com.taptap-wal

            Filesize

            12KB

            MD5

            a161ec6d74b0f24e7978cd08ad33bede

            SHA1

            50ed42934568990e3bdeb9193be0ad4da567f608

            SHA256

            d2a19a77ebb1f79d0b2574600e1802dde98e531c4c3bdf8e205bbcb3c238cf40

            SHA512

            33f817cc6c33fda48e03c78fc196436806ce801bdf9f95fabeb31be7cfe8f0e8d88568a623c3c8ccdfc0e0ab61395b8be1d9ec5d376040b2ea649bdb64e741d3

          • /data/data/com.taptap/databases/search_history.db-journal

            Filesize

            512B

            MD5

            018d9c9824ff4f072abb9d488bea852f

            SHA1

            8e2cbccff90871ab34cbfcfb22078c391850bf88

            SHA256

            ec3bc05598c30339a105b1e90219804d6abf60e9c3289ecb17971f0116617069

            SHA512

            5b8791ab8c1353b1ec938cde7ab4b519d16a12bda92b3cc13baaa00c5a483b8cd015b9ca55b6b69abd259e79c5e362c5b150ee1eba68f95bf1068ed5535760de

          • /data/data/com.taptap/databases/search_history.db-wal

            Filesize

            20KB

            MD5

            0e0fc53bf94e7d5acfe97611796a2d3b

            SHA1

            65923b672e0470af1aca9cf21f03d45309afd8d1

            SHA256

            e0b282465541848f668cb59f9697217b7877031f12235d28e37d8a6343ff966d

            SHA512

            f0c17389e0a7edaf31b5e6e86fa99470b9c10cf5f6409ff10543d11a062c25cedbfeef1d25344fcc305ff219f31aa4390b7ca903fd20bc46ef99a896cc159f39

          • /data/data/com.taptap/databases/taptap.db-wal

            Filesize

            148KB

            MD5

            ccf3fe613e13d3ca1628925179bb9496

            SHA1

            da7651b4c0abb9aab3b0d40633a86820333a5fd7

            SHA256

            771375685ba1ac0431d8d2ace7547112ba3e5373318ea7099caece4a4033e1d3

            SHA512

            ebe71d88df04a3cc1aa349eb646efa52e78ad774da7c214d30d675e1885113a793239fe25e56779e3d564d1328dc47060e2857c74b98a2286e0d31172c0bb6cb

          • /data/data/com.taptap/databases/taptapdownload.db-journal

            Filesize

            512B

            MD5

            8d735b967e17aa87ff085a978fffb0d7

            SHA1

            9f5c61023e5462f58c5ca62a0a6f0cfed54f3a78

            SHA256

            5eb04a4324cd9f91a345f2e4a460547bcac955b7bfa6db8c2ff3e367a697e054

            SHA512

            e0c16b096826c907b013c1b7a3251480dbcd4048a5476ef5a5b6d73947a6aa19c5012504694ca55080a9be9a760b3a291620c6bb0ad7dd72a71ef96fb8df70ba

          • /data/data/com.taptap/databases/taptapdownload.db-wal

            Filesize

            40KB

            MD5

            fb035aded825b5e763a242f6af776b71

            SHA1

            804e56b4b2091362a73fe33ea51e7b34cc6e7e1d

            SHA256

            52f977ce8bb47e5e65c29bcb2adeac26882a51398b1f60bd1591cc26664d900e

            SHA512

            03a53d90cb3c320e979c94e0c650c0dd2d5c151a7b2928a04b6156a1e76011792fe319f7c43fa319d7854fb5b0b36074ad53f4a42603060ed8d285489f923efb

          • /data/data/com.taptap/files/v3cache/3c4219c200021936b8d22d4b162013bb.0.tmp

            Filesize

            4KB

            MD5

            af045ad40bd8a43b7790ddcf57974676

            SHA1

            1f6d4e3f3492c41ed006ec8a0fc7432aff54ae11

            SHA256

            67fd4fc96856e60de368ae8a08d24df79a6cebf5d97f114861c565cc13296ea5

            SHA512

            3839f594006a1847577b73e9666774764d09e98b9412ed01a340a68313780a1cd62b4d5456a50d1a3f4d3a7a1fd1f881816a33cdab7b350c00ddf76232c7bc3b

          • /data/data/com.taptap/files/v3cache/3c4219c200021936b8d22d4b162013bb.1.tmp

            Filesize

            15KB

            MD5

            ca1d8ba1122c4b3bc2803d7880e89191

            SHA1

            782e6aab31effde3c86581b793e53828fcad644b

            SHA256

            7cc1584a8396ee76e72f3b83a74f89b65d7e0c824e83f355c6e56ea2857aaa14

            SHA512

            3a902d2e21e4323fc685d42689e6a81482ab58963b2c7c9c0c47abc84a0c7c7fc6b288d1c886606157382e796a60fe062b17307c39d7de2ed0777c5d4b13f942

          • /data/data/com.taptap/files/v3cache/60c3175ef85718a68c61df81d5dae987.0.tmp

            Filesize

            4KB

            MD5

            e890ccd52ce53059e666f1bf1192a5b8

            SHA1

            18e5ac7fbcd6ce74ece3267bb649992a405a1f64

            SHA256

            266fed8e42686040ac61c3169f87c701495882f8bae9509963703307a3cdb753

            SHA512

            a77a4dad55c2d1a94437e1492c74770164099842141019bb342b3f1b2e40a6d9d0b2f66651a4f2ef20c863369bc0c1e8e2286869694354227d7ebb37e906cf2e

          • /data/data/com.taptap/files/v3cache/60c3175ef85718a68c61df81d5dae987.1.tmp

            Filesize

            18B

            MD5

            53af239ee5d3e261545dededcb6ffd57

            SHA1

            04ca7e137e1e9feead96a7df45bb67d5ab3de190

            SHA256

            99eb12f2ab3c4866a353e098ffa3cb7a967e617c49b98480394ec5d8ea92b094

            SHA512

            c734e4a5ff5d335a91518dbf47861bdaf8012af49371dcd2e3350e269c9a5a1cc094114d17c4f5b053f3757b4b07487ebd0d309c91ef97acf4665cc5d5c9a2d3

          • /data/data/com.taptap/files/v3cache/77a2246cd3bd78204efb3203566353af.0.tmp

            Filesize

            4KB

            MD5

            7b1fc3875c662ff6f7604a4a7dc0cb26

            SHA1

            4e7bdf64a7d13401caaf94b8d437c7bcaf6bd35f

            SHA256

            02a353627bed6799ab3be73c1b7a89f41494de514413c4d1d4dcc79345fc5e11

            SHA512

            ae140697a59e5bbed3b714663ed1122467d7968da0f964980aadd9a75d62bb774d1e9caba94c247dba6d7870b47a92ce93585d7c5332c1b3168e7526d953dd67

          • /data/data/com.taptap/files/v3cache/77a2246cd3bd78204efb3203566353af.1.tmp

            Filesize

            2KB

            MD5

            c919777314223db432f9c10402ed2c80

            SHA1

            412c440a4f258493737fcabc1f4dde94a62a15e4

            SHA256

            e4309b209a70d34131ccb0238766a0e9a7a2fbba3c528b81cb59929dadd214b1

            SHA512

            3cdeeba226a795d296e69412224683b1898522369f17ebb877a412b8438e43091cd3cb3480c35fb0b714d86124222716a7618212ad60126af22e1f89b80064ae

          • /data/data/com.taptap/files/v3cache/journal.tmp

            Filesize

            36B

            MD5

            37e8e716e0e2f4a0b05cd9571d95b84d

            SHA1

            f8d068f6931707bddb8cd69f706f2224ad1fea3c

            SHA256

            7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

            SHA512

            e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

          • /data/data/com.taptap/lib-main/dso_deps

            Filesize

            128B

            MD5

            638d5d0673c9138639da6e058c55590c

            SHA1

            756081499736df8a44bbb57abadc374623c8aa9f

            SHA256

            70f2a6140a4b172b68069da4f1f62acf73dca8818d5ac72654a31c93ee8ce85b

            SHA512

            e4edf743ceed9456eae0781bc83ed1dd758932459deb7151d84e3b9be0c06fbf68c8d8f54d87bdfe5f2b0773fb39b3852528445be140219865313a6843bb4979

          • /data/data/com.taptap/lib-main/dso_manifest

            Filesize

            5B

            MD5

            c06857e9ea338f3f3a24bb78f8fbdf6f

            SHA1

            c5a0a2529d2deb60fec041b4fbd722a2ebe31702

            SHA256

            957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

            SHA512

            29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

          • /data/data/com.taptap/lib-main/dso_state

            Filesize

            1B

            MD5

            93b885adfe0da089cdf634904fd59f71

            SHA1

            5ba93c9db0cff93f52b521d7420e43f6eda2784f

            SHA256

            6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

            SHA512

            b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

          • /data/data/com.taptap/lib-main/dso_state

            Filesize

            1B

            MD5

            55a54008ad1ba589aa210d2629c1df41

            SHA1

            bf8b4530d8d246dd74ac53a13471bba17941dff7

            SHA256

            4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

            SHA512

            7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

          • /storage/emulated/0/com.tapdb/tapadid

            Filesize

            75B

            MD5

            896e69fc94b973d8f6a9f310e8758ec2

            SHA1

            26e2d704e87a55eaafe129eae59b9d4228bafd28

            SHA256

            1b7506ae62e4f37c7029a07e55a7e9987e7d45ea9e2d783893aed0dad62cacb1

            SHA512

            6ea901971cc9ce8102d0f4605ccb1ee5adc095c89bb289621aaa804a5ff04e9b873edfafd3e34f55aed2549f503ac4286845a91f170f54364ef4b78397d7d888

          • /storage/emulated/0/xindong_storage/com.taptap/__TyrantdbGameTracker__

            Filesize

            282B

            MD5

            ac1eb07f7ac411c09bfc48ae69297f88

            SHA1

            d4741e3b1760508c8c54341071b7a384882db25d

            SHA256

            34a35960d58deea0026f58fbaa2e0d10a5a4b039fc878e63d9255a4272beedaa

            SHA512

            d0cd7d9f3019bf8c5eb5b274183b015dbfb506278adbe7ef95e35381fee87e6c7d3eaea81ada5bff2167eedbdbd5a68d1c1da67c452c83b632a89cd9c7534d12

          • /storage/emulated/0/xindong_storage/com.taptap/__tyrantdb_sdstorage__

            Filesize

            205B

            MD5

            b0903f9c0b7b0b76cf7751fea197d215

            SHA1

            9199e3e4f1f2932ca9f722510ffb2f5263e464f4

            SHA256

            94d6d22cef26e8883b01aa9c61ba88a8100f52529454648de352d652aa0e30b6

            SHA512

            54a7d9c0c4d1faedcc52a934b50f44cf9eed3cb6040173da10badb944246777a25af504630a000035156a68f95f8032525c4585d0ee322122f969da2faf48ca3

          • /storage/emulated/0/xindong_storage/com.taptap/__tyrantdb_sdstorage__

            Filesize

            299B

            MD5

            00cd9f1586ec6ef07c446e62f29dbb9c

            SHA1

            0cdb5c5546823003b341948bcc12fa71c400d6c1

            SHA256

            7dcd52e6efdba1b1b388a62617f8d122d0e72f268180dee05f22c5802d15709f

            SHA512

            188e50de932a9c7b8775d12ddea601ff44710d95590d38f600f496a51cb6ba4d10b52a0b7792521fd83e8518a65f75a1ef989ad5165d4e96d05008a342011624