ece7612cd7f96ba1fa5f42d9d674d1332c9c20a705273c13089dd5dae4390dd3

Analysis

max time kernel
7s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
26/01/2024, 17:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TikTok_33.2.3_apkcombo.com.apk
Size

274.5MB
MD5

f29e5fd6c58a60771003e764107a9cf5
SHA1

1202b127d89a85cf956a1edea66923f62ecc8faa
SHA256

ece7612cd7f96ba1fa5f42d9d674d1332c9c20a705273c13089dd5dae4390dd3
SHA512

19f8c01e75259193d06f8fb9843705c16d785c62abfa3c7794f13dd6875674b21583fb98b83b253b7f818472276f2dfcd67b423173704cdf03e0e57986fdf77f
SSDEEP

6291456:LO4SKKtktLPNZpBDnA2ltgnKcF7wBy/HDedmpwA:K4gktpZP7lKKcNcUph

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4637	com.zhiliaoapp.musically
/system_ext/framework/androidx.window.sidecar.jar	4637	com.zhiliaoapp.musically

com.zhiliaoapp.musically
1⤵
- Loads dropped Dex/Jar
PID:4637

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1706289226028-1706289227202.allData

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1706289226028-1706289227202.ctx2

Filesize
807B

MD5
1b3d9300d1519f5c9e2408101005c57b

SHA1
9f4b73296b9265c97b5d812ba071f9a85b0f8cfd

SHA256
eb6828de501fb6b7deef46b7d46a0028dfb9467b0c953dec1785de93a0e8e855

SHA512
f8e232f5d019b7f8f703c4061a1f187230c40b13b0c01e7a0996ce0a1c748b973d8c690c6867f75b881a5e498f7242373f56af1cff8effe2fbc3643d2c9b700b

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1706289226028-1706289227278.ctx2

Filesize
807B

MD5
ad6313dab47b3d6cbfb492c566ca6b33

SHA1
1e3160a37624cf1878d5da952a2e149c6570e614

SHA256
5efc09ec44cee847157dfafa5c88af7580075af5e6c54da9771b6b6269ed734a

SHA512
f7f7ac3ee3b3207410620669a0c410e3bbdf2997efd8a5e75119476aac25050fb46f36cdf5c9f3dd33073cfaf41ad6ebb152e75c22309b37947e02d0e4f3cab2

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configFile

Filesize
3KB

MD5
55aba9bbe8bbe92445031e386c6aa8aa

SHA1
8b3f3cccae53d7b7c6e72449ff4205f68354d806

SHA256
ece9fa9e7f8aaed687e524be64a71f7c452adcb186c9fdd6481667969f1f504b

SHA512
6f05124bac8eb00f04f2b57fa1acf52a9e430db380ec2fe561caee87e97babec3fc5b91da0665b4d089a838e170a79a13e0f6ef9010470829a1da1edaad073a8

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/configCrash/configInvalid

Filesize
53B

MD5
25a258dec42fb8bfeec3bc27f88857a3

SHA1
a46a28e0dc4030bfdbe4a02958d56c700bbfc815

SHA256
b9ec8a14c60cc68e943da30907e386959d5ca65bf5441274add5b29b1cd36546

SHA512
fed8fbda46fba44c529b4f17c0a4f7b442198d4c88286fa81dab67f57e06855fc0c43d2b38cac681380c6eb29db7f280c0016e3d170404394403b4e52754e4ed

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/app_start_time

Filesize
13B

MD5
cb6459a3728016e2ede638e4dc14c2d2

SHA1
b45a5a764b4265d1ea999652d3d9a6454c04161d

SHA256
22c9255f81e45371efe6cd888e0a0f1a13612a5876b4bc2c04707a15aa13e6a2

SHA512
78ddc141df81fe3ac3fa24d941a681e3e7d0fe138924ac2359b08d8ef38c178b4c55289e05e27a7430bb68d802703055042e33f7e5008ae12d7c2ca528a09ad2

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/cmd

Filesize
24B

MD5
50ef9f5a0f3fc24b6f0ffc8843167fe4

SHA1
cd9b2558bcf52078c64242e751017419651181d9

SHA256
47f7aa1df82bc1b22c8bd4f539f704ea51ca37b8260f02129c096b736f86f104

SHA512
351a8597cef0227e433991befcdd14bbf304964161fdbef54d74ea2ee7ffc1374ed4ac3cb5cecf7c3812eab0fe75e6270bb8d6cf790d2eb94f4043c6a1761707

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/procHistory.txt

Filesize
120B

MD5
e1635b418facea220a3aa497f47d328b

SHA1
fe9af5a55421300197cb2adb766c1a757d02b12f

SHA256
84700880810520be9e89882def16c2d44f0801008830e78d4304ef67a031adaa

SHA512
4e7fb8e4a73c261357308203138911f9c36768a6e0bc27ea1f0f1adfbae76f4cc457bfed3dbb53a6817093a2e482e397c6c20692a34944cdc239263e17adda01

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/procHistory.txt

Filesize
119B

MD5
83fa7a85e80de516674709ab3772a11e

SHA1
43a35b9c56bfdf6527c786449455ef6ad25261d3

SHA256
32b6cac53b44ac7b5720bbde6329fc126cea31a650e5c374f33499dc326a93dc

SHA512
a590c042d09a176d5ebfca46a259c0f956fd9869272856843611448bea814c7c36894b7cd838eed403e0db9308d141715fef0fce016a248e3dd9460c0022fa16

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/procHistory.txt

Filesize
120B

MD5
66f959b6e26c0232977406d4524e34de

SHA1
0a8081826ae3458929f10eee47eb106f3f440755

SHA256
a4a5ed690a301798da9fdda53525140b34ce3d1d3901add8f7fca2998258bd12

SHA512
ac3cf7bdaa19347f40c5aa60ca10fb99315df2fe3c69deb5320733270f3afd6511e23e3cf25bcf0f1d8a51eca64acfd689be3ff643839cad9d22ea40b0b8547a

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/procHistory.txt

Filesize
119B

MD5
dba473f0ddefae1f2254f6b04223af21

SHA1
e233ada64060f3029540bfcd95d7ddb4fbd81758

SHA256
80edf204c9256ae0dfbe5ca08a58e6a3eb081cf29482d4458577b8d6afa19139

SHA512
1b3a6e9eb0d00d6964557d4a1e78b1ed58370de24eadbbb8d9cc390844a005809e912edee52d2e17ace7b03d7d6e5a730da027b80201c739194e84e02acfe725

Download Submit
/data/data/com.zhiliaoapp.musically/files/npth/killHistory/proc/4637/procHistory.txt

Filesize
42B

MD5
dfbb77aedb7c191c2532bf03c1a1dbf1

SHA1
d4d1665a5ac8fff950ff477fc23e7891af7fb4e1

SHA256
bb6db82e623e07262161dc7c889d7d3f9af0a74fcdef0b4d9103826bf3c8c212

SHA512
33c4864ded921f973983e7ecc2b7f8c61c4c28ad91bf06411464e39adb55e2cfbaac25ade179d1460c8f6ac7b0d7d2b68e8189a3077dee879581adf868e8b68d

Download Submit
/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

Filesize
933B

MD5
029d8bee29626fc13d4158b03f4f51d4

SHA1
d475b27b3d6436e148bef0573017c371931fec8c

SHA256
ee73d8c2325b962c8f02470ecbe9f7b40b6ddbe2e10e553bf55903e07df20ab1

SHA512
1f7e0c32d2bf025d67b9ff0e0b0eb2cfcfb0c87b0e9af335e67cc051db7c102a8413780955e3c1799e519619f4a6cc682a7dba8575fc585a7f8b0f8f2c173c60

Download Submit
/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

Filesize
1010B

MD5
db06437f023a6c037dd5b6d1ef88d89f

SHA1
25efad9b4b8c469d149eda62e91a64c2288519cd

SHA256
bd77f00c122837d454a9af3e8c41c23ae2aceea03ed852029e6591a4cf1b3b7a

SHA512
90f1bdef62daf9652c3c978a8212c713b0e25d55bb4dd89a1880f6d17a803b11b69174f7b55815ecdfd3d0e6e3ae4807b2b15de80016bb931cb6232b332888be

Download Submit
/data/data/com.zhiliaoapp.musically/shared_prefs/CLIENT_EXPERIMENT_CACHE_TAG.xml

Filesize
848B

MD5
a45aa253d3a282cc45fa35a9a7408051

SHA1
88bd1253e3d737ca6aed8aabf53fdc85080e9616

SHA256
a5b3f5b2588aa85a89491ebf213998aa3361cb8fc5009339d524bebc393c0980

SHA512
60ca2426dd11a4059b350fbd65a69603384f630c4602dc37393f01c234576e4daf1615478cdee6341be7b20e7fbc3a241e510b2dbbfe2831483ea7637a7f628c

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit
anon_inode:[eventfd]

Filesize
8B

MD5
33cdeccccebe80329f1fdbee7f5874cb

SHA1
3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe

SHA256
7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8

SHA512
991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads