Analysis

  • max time kernel
    6s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    17/07/2026, 06:10

General

  • Target
    sws-android-2.04.apk
  • Size 12.3MB
  • Sample260717-gxddsact5m
  • SHA256 59955b753cd31795a1034f87cbd2c401ef1af685b39ec49722ebf1c94bb64a03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.tangkou.app
    1⤵
    • Schedules tasks to execute at a specified time
    PID:5099

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tangkou_app.db-journal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-journal
        • Size 512B
        • SHA256 d0ecffe9d80b3b0e4557a0ba00ce80a2d47a8cf22f9514ec3704de6ea88e07ca
        • MD5 SHA1 SHA512

        tangkou_app.db-wal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
        • Size 16KB
        • SHA256 967fc6f0dcb82b43cb5fc6146f518a02525847eb6c899290946e8d41cc753b47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tangkou_app.db-wal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
        • Size 144KB
        • SHA256 dc1c40ee0fa531938427121ad467be1184d03dd44fdd33b8365f87bd901692af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tangkou_settings.preferences_pb.tmp

        • Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
        • Size 29B
        • SHA256 4618f0664c8d4b82a1c6ee14248cf8eee5b98cd6c94fd002c99b57dc6304a208
        • MD5 SHA1 SHA512

        tangkou_settings.preferences_pb.tmp

        • Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
        • Size 29B
        • SHA256 9ed75f1ff56ab0e722d39edb55e4b7eb6fa23410a4baf2410e8548a1f304b2fc
        • MD5 SHA1 SHA512

        app.log

        • Path /data/data/com.tangkou.app/files/diagnostics/app.log
        • Size 85B
        • SHA256 75168f5add8750963fc595f64432c96d84df8088b059d5ea3174bfa60011cd81
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.tangkou.app/files/profileInstalled
        • Size 24B
        • SHA256 9506799655558ed85a494a621a82b8773d9714e52a52208620c5ef4e0ea3653a
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.tangkou.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 be592176260ee054ce356394eafa81689ecf6e227eb7f7528c55bcdaeee70f3f
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 2a91de150cd1746063891e8ff11b390f1805c290705609a1e89d5855866f3fe0
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 9bef32eb4930a92c8c89be0fae29b3e772a2be55dc94375711d7abbc0760fbae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 8cd57a2f8629d0a7c2db2cad2b0871283a2814f4934b80f3d4421221083322a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 213KB
        • SHA256 5cb20330dcebf1d8326f102da8f8647de32e1464db118b0c351b661f77abe447
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
        • Size 8KB
        • SHA256 c10ae28a04bf0d87a9f3a72535f4fc2087ba6bfe61d8da3cdf971679af00d613
        • MD5 SHA1 SHA512 SSDEEP TLSH