Analysis

  • max time kernel
    46s
  • max time network
    154s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    17/07/2026, 06:10

General

  • Target
    sws-android-2.04.apk
  • Size 12.3MB
  • Sample260717-gxddsact5m
  • SHA256 59955b753cd31795a1034f87cbd2c401ef1af685b39ec49722ebf1c94bb64a03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.tangkou.app
    1⤵
    • Schedules tasks to execute at a specified time
    PID:4769

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tangkou_app.db-journal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-journal
        • Size 512B
        • SHA256 0d07836c327d86842ccf0eb373f76836d50b7f3703359339598e13bb78aa3c0b
        • MD5 SHA1 SHA512

        tangkou_app.db-wal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
        • Size 16KB
        • SHA256 660f38dc0dcfd3bac7bf35c6af77477ec6239b79e7dccf437ddd4fcd2ed0b695
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tangkou_app.db-wal

        • Path /data/data/com.tangkou.app/databases/tangkou_app.db-wal
        • Size 144KB
        • SHA256 c06afc6e70344fe875a92475b5a6e31fb085a8993842363ba3a1bed747b7cf26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tangkou_settings.preferences_pb.tmp

        • Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
        • Size 29B
        • SHA256 d5316d0329473fdaefeb90d7d3b03b1f0459c7395096ca069ac3920935a7b341
        • MD5 SHA1 SHA512

        tangkou_settings.preferences_pb.tmp

        • Path /data/data/com.tangkou.app/files/datastore/tangkou_settings.preferences_pb.tmp
        • Size 29B
        • SHA256 889a35223a72857a0a21a4cb68a621af406c81ecd8415f50120af1fd9a1360c9
        • MD5 SHA1 SHA512

        app.log

        • Path /data/data/com.tangkou.app/files/diagnostics/app.log
        • Size 85B
        • SHA256 8fae166c719fd619c4f7e9813d8bd514f0eeb250f19db5ef1c78007f21c7d397
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.tangkou.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 b4fbb65d59d37d0a638b9198665fd55441a28e28a5bb228c8bd19d480f28ed96
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 c601b58bc5ef94353ea34a1619f437c706186f69783285548d2087c233767cec
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 8ede66847a741ab343585f889fe43eaf09f147bde2a9d01129efa260a8e28773
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 3fe958b94d8b077e1f9c70a66ed7932b19f7871d7c72752a81e56064a5c83f76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.tangkou.app/no_backup/androidx.work.workdb-wal
        • Size 205KB
        • SHA256 d13a1b1120f39ae6733b07174bb20275843c26afd853c5ca7ccd58a7da42789e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
        • Size 8KB
        • SHA256 c10ae28a04bf0d87a9f3a72535f4fc2087ba6bfe61d8da3cdf971679af00d613
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tangkou.app/primary.prof
        • Size 18KB
        • SHA256 08a573920cde0cef108e438f2f47801d6b197c61a97d87fd0554cf6b13d91391
        • MD5 SHA1 SHA512 SSDEEP TLSH