Analysis

  • max time kernel
    45s
  • max time network
    154s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    17/07/2026, 06:10

General

  • Target
    sws-android-2.04.apk
  • Size 12.3MB
  • Sample260717-gxddsact5m
  • SHA256 59955b753cd31795a1034f87cbd2c401ef1af685b39ec49722ebf1c94bb64a03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.tangkou.app
    1⤵
    • Schedules tasks to execute at a specified time
    PID:4386

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tangkou_app.db-journal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-journal
        • Size 512B
        • SHA256 d479fdfc73c5e1f6da669b174cc200939b183c2d98b2c0d2a4da1e14a0ffd01f
        • MD5 SHA1 SHA512

        tangkou_app.db-wal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
        • Size 16KB
        • SHA256 350fb7a16672e84814314bd6dbc956a0075114363c78a8dc4bfdf9986f14fe92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tangkou_app.db-wal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
        • Size 144KB
        • SHA256 157c1984a0a367e78d732131be63da0daa8c61380bb772e26b552bbdec538216
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tangkou_settings.preferences_pb.tmp

        • Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
        • Size 29B
        • SHA256 4605f4abd9df6b111914c46c34e1ee519f8aa70b0a16f9ac0baed59ed7a221a0
        • MD5 SHA1 SHA512

        tangkou_settings.preferences_pb.tmp

        • Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
        • Size 29B
        • SHA256 be454648324253ce9e0a423ff59fe2b5f0ec748656fc3c667c535dd03d1f5a09
        • MD5 SHA1 SHA512

        app.log

        • Path /data/data/com.tangkou.app/files/diagnostics/app.log
        • Size 85B
        • SHA256 d6feff51857724ced50e77da991b122ba64d6f7c4c43821c4fe2dbe0edf19a6a
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.tangkou.app/files/profileInstalled
        • Size 24B
        • SHA256 55e2fc238b608c8fae6c6c6fb600ad8b7c23fa6a3c64f7f1617d455a3f3c7841
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.tangkou.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 96d56e08108e2264bfb6b1e1f6bee53da1fe2d36096bcd368a29546445ef341d
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 eed5f491523b660d12013866e31a9038f537549bf286502f7d3540a2d861c2b9
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 2ae76e3d493112d17bfe9c68620745de9ef13614d4c48f5eba54f76ff6c73eb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 7641eccba56c6e0aea214901b1d594309af4188d423d42c697ab87fb98d4b842
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 213KB
        • SHA256 578ecbd270d8799670e3361a4d46f899d3e57346cfa914540b35c13afd19bf2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
        • Size 8KB
        • SHA256 c10ae28a04bf0d87a9f3a72535f4fc2087ba6bfe61d8da3cdf971679af00d613
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
        • Size 20KB
        • SHA256 22f9858cf1408cdf5a48676c6155275a14f70e9f934df08a4a82d14ec9d246c6
        • MD5 SHA1 SHA512 SSDEEP TLSH