Analysis
- max time kernel
45s - max time network
154s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
17/07/2026, 06:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sws-android-2.04.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
sws-android-2.04.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
sws-android-2.04.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target sws-android-2.04.apk
- Size 12.3MB
- Sample260717-gxddsact5m
- SHA256 59955b753cd31795a1034f87cbd2c401ef1af685b39ec49722ebf1c94bb64a03
- MD5 f4389bf2bdf3ed6f251dd09949bea592
- SHA1 7882270d38488fb570ee08436b8c6657d5590c2c
- SHA512 3e3d741192a4ce78e13e1750ff5d440594f93259a67d245d3d935bf33aa9e32036ee368c79610fe1dfc35d4dd37f76c513dda34faeb3c68aa181e7b17c88dbf6
- SSDEEP 196608:bxNY3Jenn85BHHZKzx7DONgAc2K50w+yn89B0m+PGjrBIAZ1vVksm0cpn6wj+hOW:Va5++HKidc2g0g+GPhjpnsULIR
- TLSH T196D63356BBA89F4ED877D1720C4A633A540ADC23C71BC347CCB82A59648F9F85F412E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.tangkou.app
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.tangkou.app/databases/tangkou_app.db-journal
- Size 512B
- SHA256 d479fdfc73c5e1f6da669b174cc200939b183c2d98b2c0d2a4da1e14a0ffd01f
- MD5 cdad53d5ef2be0f5e11b8413d96da131
- SHA1 6fcec18453a71ab7efe907bd620c567cbe379ec5
- SHA512 77607df863b29cc8cb177588cea2f429da6db0444f31a3b3072e805313e064ccaede60d8edd1ec06b882849eef605fd4b0d739c5a3e6471f4674cc50665d11b4
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
- Size 16KB
- SHA256 350fb7a16672e84814314bd6dbc956a0075114363c78a8dc4bfdf9986f14fe92
- MD5 cfd32b2cb72a7773837816fbaa209df3
- SHA1 efa4ff3d19abd98620d2717049f44b671a3daa6e
- SHA512 083540b0e7cec820e9bfa2d47dc748337a2273023a157aca396b559ffd9f8d51fc176fcb05237ead9b7e55445cc04d1e7477204edebef433527bb07b1b3f8105
- SSDEEP 6:KyBrpoWy9FZdrlOERX4PBX4ogLugMBX4suuK+/vUHvoliMiOw2:KyoTzdTRmBEyPbP/RliMiOw2
- TLSH T177722B44A79049B2F854133284C4C3111EF0EEFD57DEC70765100474BC123CC5553E0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
- Size 144KB
- SHA256 157c1984a0a367e78d732131be63da0daa8c61380bb772e26b552bbdec538216
- MD5 e96b0b47f941bf501c05e48c363bd5ab
- SHA1 0f50cf34c73c9ca2d2e38ffafbe1c646270b934c
- SHA512 b6fdb7fc1644b64f48517d469ca35bda34a81925130d031ef41cdf18e265c583025125f5deb589497716c5703bf06cd826c93a5f82666eb22f38a9cfbf0776c8
- SSDEEP 48:R4vj50bx7R+eHla66P/3EEGGIB9ACutGhtb03SGhF72TmGk1nGhHw7QID5Gm4v7l:Wvj5e7RdJ6XCoCuv3aAJEhpagXznoSV
- TLSH T1AFE3DC5F3F35A322CCF8D2B1D9900FA655EE14AFD3A332F1594440B6ACA5C16947C8BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
- Size 29B
- SHA256 4605f4abd9df6b111914c46c34e1ee519f8aa70b0a16f9ac0baed59ed7a221a0
- MD5 9d7acd51df409bd1ccd900ffed403858
- SHA1 82f8a237c190c3ec7d562be7022d0a5459e106ec
- SHA512 231259807bf080fd67ca3034c348d5e37228b444966b12d3b4fb280c91db86da5816b4358ade258cd8d65496dc3ed999086f5ae1fbbcce11883fac1f0391713b
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
- Size 29B
- SHA256 be454648324253ce9e0a423ff59fe2b5f0ec748656fc3c667c535dd03d1f5a09
- MD5 5824142e3f428b7257004a0ac49ab3d7
- SHA1 ace3f49007d517a8b5f411b0e3b51b105c76d2df
- SHA512 b4c9ff9d48fed30562ae8476de25e8e70e3e2795d7bbf86b70eddaf1f540b31baa04bb788c1bd81c1eff4c8edc8b8a6e7fe356f099bcc6a4361a0c0964c5586c
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/files/diagnostics/app.log
- Size 85B
- SHA256 d6feff51857724ced50e77da991b122ba64d6f7c4c43821c4fe2dbe0edf19a6a
- MD5 7bb5f7627083fb83d0294651ca47072d
- SHA1 818217be76e76eb12eb229dc06b33f0c359ee6d9
- SHA512 a273ef0f43fd6237605af2d297162e5b5215a0f5ea182ae39f9de532619c1d92cf04a21aa1b586b9ebb94deed3956afd0adebd9845171779b7c50820d162da1b
- TLSH T18BA0124020342044421C8A1C703113C5E5C2F0F522602920021A174412499031D1C314
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.tangkou.app/files/profileInstalled
- Size 24B
- SHA256 55e2fc238b608c8fae6c6c6fb600ad8b7c23fa6a3c64f7f1617d455a3f3c7841
- MD5 49f9440ed4dd7cdee96c1141399fdfed
- SHA1 8e259c73da3961b01a91b52e4296ffdbf7e66549
- SHA512 eed15f5ea51e3de1669ab6eadbc9fdb9adedfde1a3d36832af2e0b398b16af3d0464d16cec24d78618a2640101ba3951e8bef3fcdfd966e3e05028c89c01b7dc
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 96d56e08108e2264bfb6b1e1f6bee53da1fe2d36096bcd368a29546445ef341d
- MD5 f4cd74aedd0f0535a87f79e518b99669
- SHA1 fa3a999b4fc4ca5b7356399d6318346cd2cf803c
- SHA512 68b3058b0ddec3beaac0b03a04e9ec56f92dbd30cd063d5cf6703cfa762b26f78fa73a9f6743a50b619243be53166712b228756c1798990dd3647de104d4fe51
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 eed5f491523b660d12013866e31a9038f537549bf286502f7d3540a2d861c2b9
- MD5 98c45ad48bb720e28beacfa91d838062
- SHA1 1aa58d67ca47f04282c84d4496fd596ee73636c6
- SHA512 7b8bc76fa002bf481b6157ba6e004775eac641750853e8e4983dda497a0724113cd64fa35aaf844603436e78cb770d55b4ff9d8a07c4d5cc21a7d2db34388c4a
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 2ae76e3d493112d17bfe9c68620745de9ef13614d4c48f5eba54f76ff6c73eb6
- MD5 818b1892fa27f1ba6dd3f9bc4d94b113
- SHA1 0b23c09f1aa06d7ded9eee8a616fefa6c66cc360
- SHA512 7e15fc2794481e5c773593e37e18181bc161a665785e0af64e620738b0391f9c749f0264d9590bf2c608e34ea5c54eeb6ccd31ed949df9d185fcf5452bcabd0e
- SSDEEP 6:K3FUD16r9FZdrlOERX4PBX4ogLugMBX4suuK+/SYE2opUtvDogOw2:K1WEzdTRmBEyPbP/SprpUlDVOw2
- TLSH T1CD72C2C1A3850763D10A1BB270C8F3451F686699DF26D74767510ADFFC82E88A960E1C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 7641eccba56c6e0aea214901b1d594309af4188d423d42c697ab87fb98d4b842
- MD5 0f1c8e900578be462c4910232b296fac
- SHA1 01fb82e3233e41cbd8fd1bca11c307108401fc46
- SHA512 6078b15c45d6cb2097cfa9005f289f78ca99a2747111ba5ca04ed3c2434e58853c8a7107521792402e3b6f278f8cbc160e36e79c167b52d5465e27fbc45ee64c
- SSDEEP 96:hHQSnON66+etidjnZRWzzb8/KeKcK+zSAddKz+ZD86u0ExV:hHZONPtidjnfWzzb83zSAde+ZD86u0ED
- TLSH T10FC3F1CD0F192702C0A95CB0E5901BA17A3E415EDF93F3D1669101BBEDD2D219929CFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
- Size 213KB
- SHA256 578ecbd270d8799670e3361a4d46f899d3e57346cfa914540b35c13afd19bf2c
- MD5 c3fe0f7b927469e1e3f00a44e18dca32
- SHA1 d49edcec1c314364eb1daed869763834af57c256
- SHA512 d2b970ddae42188ad7f3c6980d71a3be33e6761c6ffb94a00df10036f860ce005796e5bfb7356d563a8ea717884915f9c754496528cd4220db1899b94c22af6d
- SSDEEP 48:1Ww1DtYeSuQcIYw1DtYedK4V+w1DtYe1w1DtYeTw1DtYeS:P1DtY4Sb1DtYXo1DtYl1DtYn1DtYF
- TLSH T13E24F1C6AF408213C22A5E3CF485B3A806B50CF2CE64EFC4179AE7D6E561615A57877C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
- Size 8KB
- SHA256 c10ae28a04bf0d87a9f3a72535f4fc2087ba6bfe61d8da3cdf971679af00d613
- MD5 902e82111137709b05bb8caa930771af
- SHA1 5bc70aa8411a79fef4bb756f21e2ba3274295424
- SHA512 9cc1c254c583c3633caeb39c9fb830b3ffdb344cf350f2aba7e9689e328f7fd3664ebf191e8be987779ed877d9f0ec248097bdd19d5ec56b2ed87616b6d49813
- SSDEEP 192:/O7Q9sbcpNpEIi+ywUVRaz0+nSoWoq3Cj+nXS39PO0Gjp:/O7dbENpEIfwg0rN8jUiNI
- TLSH T158027CC1BFDC66636EB3B0E61214B8D2E28426C4ECB89550009C15D76C0EC3F0FCE59A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
- Size 20KB
- SHA256 22f9858cf1408cdf5a48676c6155275a14f70e9f934df08a4a82d14ec9d246c6
- MD5 e38120c8c719b39a2135cb413fd88196
- SHA1 6ef266690be644f3f9dcbb033b1da87d3739c4b0
- SHA512 3d690718e703c81a827cd6276d2b83700167746c71dc078c6eac1c9b32d06e7bb1530119c27d678f48810377754bd6a8e9283c5ed8ecc6f89be3b2bd950c5df0
- SSDEEP 384:3UxTqVXb1yvESd5T/Y7RV025y2ym/uyBOIWYMbp2WsgcoctvYrqGhRynf4:3G+Jb1ysS7/qIohymFBdgggcamGrl
- TLSH T1CE92D033A8EBD6578B2C0632EEBA6A0D19E7735417CB09731C52D8F353254B3E241A39
- MD5 SHA1 SHA512 SSDEEP TLSH