Analysis
- max time kernel
6s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
17/07/2026, 06:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sws-android-2.04.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
sws-android-2.04.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
sws-android-2.04.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target sws-android-2.04.apk
- Size 12.3MB
- Sample260717-gxddsact5m
- SHA256 59955b753cd31795a1034f87cbd2c401ef1af685b39ec49722ebf1c94bb64a03
- MD5 f4389bf2bdf3ed6f251dd09949bea592
- SHA1 7882270d38488fb570ee08436b8c6657d5590c2c
- SHA512 3e3d741192a4ce78e13e1750ff5d440594f93259a67d245d3d935bf33aa9e32036ee368c79610fe1dfc35d4dd37f76c513dda34faeb3c68aa181e7b17c88dbf6
- SSDEEP 196608:bxNY3Jenn85BHHZKzx7DONgAc2K50w+yn89B0m+PGjrBIAZ1vVksm0cpn6wj+hOW:Va5++HKidc2g0g+GPhjpnsULIR
- TLSH T196D63356BBA89F4ED877D1720C4A633A540ADC23C71BC347CCB82A59648F9F85F412E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.tangkou.app
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.tangkou.app/databases/tangkou_app.db-journal
- Size 512B
- SHA256 d0ecffe9d80b3b0e4557a0ba00ce80a2d47a8cf22f9514ec3704de6ea88e07ca
- MD5 b170d79f047315aababe97f1009de739
- SHA1 0348e46dbb33a7d82b8a1f65be61842a8e470bb6
- SHA512 c412a9231a52c615a9ee88ed3175400a827608815855a33e4665b2cb2fcb650ca97e3e2404794725b35ba0455e7983a452593d7be6074834d4e8a36ea0f9801c
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
- Size 16KB
- SHA256 967fc6f0dcb82b43cb5fc6146f518a02525847eb6c899290946e8d41cc753b47
- MD5 6d7d4ac0ad066c0255964dce4b92e720
- SHA1 2c4e4ffc4b7926618a867b78129c43f110df79f7
- SHA512 786dd080fe70c8d95a55b03b299626676f8111187e3e7411b25817e6c6aa93f72a0845d43d2b77820723a7e04b1129585a88a606e7dba5e570fc62fb856b9553
- SSDEEP 6:Kc21v9FZdrlOERX4PBX4ogLugMBX4suuK+/ttOqIBOw2:KDlzdTRmBEyPbP/cOw2
- TLSH T128722B92DF4225D3C00E13B2C4CCD3211D605E198393CF0F5D603B646C11FCCA490D18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
- Size 144KB
- SHA256 dc1c40ee0fa531938427121ad467be1184d03dd44fdd33b8365f87bd901692af
- MD5 8bbc5a3072989f4c9e8c00638e17bfea
- SHA1 6e054bc6fda89c9c48179d209db42bd4266b640e
- SHA512 62b5d2c62871d8ecca69618b877fea9af4a9b2be6376968e690c8e1bb08ce2562eca298d73f7d93e27c2696f1995167bc10b59d69610f7471f29790c8227116e
- SSDEEP 48:mDBrPyNjBrLlF66P/3EEGGIB9ACutGhtb03SGhF72TmGk1nGhHw7QID5Gm4v7tsg:utmE6XCoCuv3aAJEXagXznoSV
- TLSH T112E30D5F3F267382C8F8E2B1D9C40FA659AA142FD3A326F15E4451B69CB0C52947C4BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
- Size 29B
- SHA256 4618f0664c8d4b82a1c6ee14248cf8eee5b98cd6c94fd002c99b57dc6304a208
- MD5 f8ef308d25eebf92194a47d3759b649d
- SHA1 b0678aace54bfa326c5fe73e1265c1252e3175e7
- SHA512 5e6213213eea96a23ad064538d8a007f13f7d6c15080efcb6383f8b16a1d654fd2c105691a0195365e818911f1b8e401ddfe2353378f600c7df9f15cede3d4b1
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
- Size 29B
- SHA256 9ed75f1ff56ab0e722d39edb55e4b7eb6fa23410a4baf2410e8548a1f304b2fc
- MD5 796c3f9f7fef19b86ec2b9b8154656f7
- SHA1 c1cad7bcadec4df4982685e4ac7c773a570f799d
- SHA512 d6404ca2271954a2826199c8d4156a2f76806eb24d8cbcc6d5fd5f02d06759a37838f519f5af406208a90572607c3b67ecd5d09c9d8cc0034410a01639cc54d8
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/files/diagnostics/app.log
- Size 85B
- SHA256 75168f5add8750963fc595f64432c96d84df8088b059d5ea3174bfa60011cd81
- MD5 3a08de475c69753a5b3e1340e1e00ccf
- SHA1 b0929d24fec47a85a58d94be0f23d9442f243807
- SHA512 2575b1b3e89e2e3f11dcdb88d932e560380f3cf297779ac0ad0444ec849898a272d8e5a1798d704c25552721ad436734cbaaa9a6db111e0716bae0f49e1e47b8
- TLSH T17CA0128020202044521CC91C70311381E5C2F0F121902C3002662A5412098030D1C318
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.tangkou.app/files/profileInstalled
- Size 24B
- SHA256 9506799655558ed85a494a621a82b8773d9714e52a52208620c5ef4e0ea3653a
- MD5 e3d094fb806885651a9dc54504151ae1
- SHA1 2fa991106be6d7487da38e4b959ee77c734321bd
- SHA512 7b6e186eb01cba7950135114ab7362f41459de4d923e7b151044dcc82f2a17229b8bc51a023b0a466f4fcf9bd5ff76686be28ef99b98be0a20361e415b71efcc
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 be592176260ee054ce356394eafa81689ecf6e227eb7f7528c55bcdaeee70f3f
- MD5 dae1c3e6d104250c71a5930ea11ee017
- SHA1 227c6114d4cf97de7dccdc550743df116e9c3f73
- SHA512 4761b6db59ac84a517a6f9d7fdd9ba83882dd4e4b7a5ba4a83d07dd330571f36ca5aab305b0cad3349bb40a90f835bff5b9f22cfd4b2eb06268fb2fdd34301c0
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 2a91de150cd1746063891e8ff11b390f1805c290705609a1e89d5855866f3fe0
- MD5 02879aeaeea1675b88961c3e6ff926b0
- SHA1 a3349b979b2eab53013983db34d6fc6f35fafb3a
- SHA512 f5246da0ece1132130b8a239d17ba17f55d8959427bdc27088d1c99fd92960e22eaa27f5569644ca36112aabd5887c57fc14ddd9e827f249c56a4c8b904b7196
- MD5 SHA1 SHA512
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 9bef32eb4930a92c8c89be0fae29b3e772a2be55dc94375711d7abbc0760fbae
- MD5 ba5d8fb5b6192bcb81ade3781e02b744
- SHA1 1747d431e6275935651e32bc58ebf96663c95c75
- SHA512 28337f3208c1190e7c3943b29f6085f3edd9f0f291d91869f57dcac417349d7cb543b4390ff37dbe9fccd314c84804f4e46c96ebb9c26f959aca43e9dbcd3f4b
- SSDEEP 6:KuMysjM2dMg9FZdrlOERX4PBX4ogLugMBX4suuK+//Mc1PvEx/pqiOw2:KBykSqzdTRmBEyPbP/LC7TOw2
- TLSH T1A1722EA4A3800953C20D5B7394F8C331BFB1BE084BA2CB0B2A2014DF6C023C8AA91E4C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 8cd57a2f8629d0a7c2db2cad2b0871283a2814f4934b80f3d4421221083322a2
- MD5 469a7bd7dd123c0ecab2281dd9e007a8
- SHA1 be2861e6f2914e092299bf51a515e017fa3952c2
- SHA512 72a2f74fdca94e525faf671b9633dbba1c69e9ede0950eeff1d2be4532c74a2e5935ddf2c5bc8d1564009889232b2bf0e8986c984040d35f132946f6ad54b4c6
- SSDEEP 96:wzKtp9m56+etidjnZRWzzb8/KeKcK+zSUddKz+ZD86u0ExV:EKtpI6tidjnfWzzb83zSUde+ZD86u0ED
- TLSH T140C3028E0F592600C4A95CB1D5E00BF1BD3E652E9793E3D2659100FAADD2921DD2ACFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
- Size 213KB
- SHA256 5cb20330dcebf1d8326f102da8f8647de32e1464db118b0c351b661f77abe447
- MD5 e56ba04ec3a9e782aae8cec34f27dc40
- SHA1 e06b254b40fdb98e33e5b29b4286a23ecdfcfba5
- SHA512 56cec07d578d2cfd03d4f42a26248cdfeaaebc61910ccf95ded9c162ec3312ea1e2a2e409b273c5512fdcb623469657907e6f6f6876e43409cc1d385e0cb42d4
- SSDEEP 96:nK1DtYCeCB98DlK1DtYaJ+K1DtYWK1DtYDbK1DtYA:K1DtYO1DtYI1DtYv1DtYC1DtYA
- TLSH T11924D1C2A7944052D738CF7DE6A78BB8E9702EE64C490F4DC35763665C331059AAC8DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
- Size 8KB
- SHA256 c10ae28a04bf0d87a9f3a72535f4fc2087ba6bfe61d8da3cdf971679af00d613
- MD5 902e82111137709b05bb8caa930771af
- SHA1 5bc70aa8411a79fef4bb756f21e2ba3274295424
- SHA512 9cc1c254c583c3633caeb39c9fb830b3ffdb344cf350f2aba7e9689e328f7fd3664ebf191e8be987779ed877d9f0ec248097bdd19d5ec56b2ed87616b6d49813
- SSDEEP 192:/O7Q9sbcpNpEIi+ywUVRaz0+nSoWoq3Cj+nXS39PO0Gjp:/O7dbENpEIfwg0rN8jUiNI
- TLSH T158027CC1BFDC66636EB3B0E61214B8D2E28426C4ECB89550009C15D76C0EC3F0FCE59A
- MD5 SHA1 SHA512 SSDEEP TLSH