Analysis

  • max time kernel
    7s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    27/07/2026, 12:36

General

  • Target
    GanJingWorld_AndroidTv.apk
  • Size 16.9MB
  • Sample260727-pte27seq7y
  • SHA256 5e150ba3e64e8fe5ef0f264bd8d4c9ca3a176e2ebf8ae76fc4f26d6f21a91f0b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.ganjing.world
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    PID:4723

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        451e51c54e0cd619b705dbda3fd25798cb380d1e2e195ba08f7d37595ea47a5a.0.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/451e51c54e0cd619b705dbda3fd25798cb380d1e2e195ba08f7d37595ea47a5a.0.tmp
        • Size 836B
        • SHA256 c8996268e03f06a8445e661a252854171f7d81a886440a913c7c4c4a7b85a1fe
        • MD5 SHA1 SHA512 TLSH

        451e51c54e0cd619b705dbda3fd25798cb380d1e2e195ba08f7d37595ea47a5a.1.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/451e51c54e0cd619b705dbda3fd25798cb380d1e2e195ba08f7d37595ea47a5a.1.tmp
        • Size 53KB
        • SHA256 8651ac95228ef625be04d520a9c2b6b6b27284939328540fc1e210859e0b3043
        • MD5 SHA1 SHA512 SSDEEP TLSH

        49cf9a4a85923d4b6de9a482fd070ad559dfa70d4041ed4041715f1fa54d3746.0.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/49cf9a4a85923d4b6de9a482fd070ad559dfa70d4041ed4041715f1fa54d3746.0.tmp
        • Size 727B
        • SHA256 ebb579cb60c36b0eb59c4ab870b69be707bba7db0ad7002d0d94efc97f865885
        • MD5 SHA1 SHA512 TLSH

        49cf9a4a85923d4b6de9a482fd070ad559dfa70d4041ed4041715f1fa54d3746.1.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/49cf9a4a85923d4b6de9a482fd070ad559dfa70d4041ed4041715f1fa54d3746.1.tmp
        • Size 17KB
        • SHA256 68410a736b98ec8a0013e37317d04af5e9f37611f3612c1517e92ba4cd0c38fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        a1bb3ea528573ee4c18d6530da9acf8571c4df1765c0f752f24090e9f9646bf0.0.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/a1bb3ea528573ee4c18d6530da9acf8571c4df1765c0f752f24090e9f9646bf0.0.tmp
        • Size 590B
        • SHA256 a396a32d5d9d12dc1bf8c09476513a8849ecfe69c2099360f916c33133d39477
        • MD5 SHA1 SHA512 TLSH

        a1bb3ea528573ee4c18d6530da9acf8571c4df1765c0f752f24090e9f9646bf0.1.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/a1bb3ea528573ee4c18d6530da9acf8571c4df1765c0f752f24090e9f9646bf0.1.tmp
        • Size 15KB
        • SHA256 9015c3ee6d67a098e7189aa9a103f60004be3d9e779f12b30d09e9cb9276785a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.ganjing.world/cache/image_cache/journal
        • Size 627B
        • SHA256 4abb74697429b80a49b35206ebd3811e90f49d6e31cabbbe37cf2f7a6228e4d4
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.ganjing.world/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        gjw_database

        • Path /data/data/com.ganjing.world/databases/gjw_database
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        gjw_database-journal

        • Path /data/data/com.ganjing.world/databases/gjw_database-journal
        • Size 512B
        • SHA256 faf90253fcd9fd8ce6bec13974394dcbd6707968bda1eb289ea1737e3b3b752d
        • MD5 SHA1 SHA512

        gjw_database-shm

        • Path /data/data/com.ganjing.world/databases/gjw_database-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        gjw_database-wal

        • Path /data/data/com.ganjing.world/databases/gjw_database-wal
        • Size 16KB
        • SHA256 86e158b37490b521cbcb2cb55e9b3f418e3c167e3654af655551154dc836d17d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gjw_database-wal

        • Path /data/data/com.ganjing.world/databases/gjw_database-wal
        • Size 84KB
        • SHA256 2adeb1164866ea88dc683d794edb72cfb9271d7974341a878e56cde4a71b5254
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel

        • Path /data/data/com.ganjing.world/databases/mixpanel
        • Size 36KB
        • SHA256 f234ab6f06c79ad209c169659cc0180e059a2cd5448162d6f2c8e843b7c101a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel

        • Path /data/data/com.ganjing.world/databases/mixpanel
        • Size 36KB
        • SHA256 bf86af6fc2b93cbb93fef4a8f7fa560bff5c4e9fee47a3ccc51a6f72bd00fdc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel

        • Path /data/data/com.ganjing.world/databases/mixpanel
        • Size 36KB
        • SHA256 82f2831f670a09a02f0f8649e507c86742388af23a00abab31cae760a7be939c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel-journal

        • Path /data/data/com.ganjing.world/databases/mixpanel-journal
        • Size 16KB
        • SHA256 a3feb60202bf68d911623602ce6a36292f760389de25030a1576fba160548db4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel-journal

        • Path /data/data/com.ganjing.world/databases/mixpanel-journal
        • Size 12KB
        • SHA256 106a2518ce9dbba21e51b1733876c4e559f1b59a9af40ad846fdf1789f152fa3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel-journal

        • Path /data/data/com.ganjing.world/databases/mixpanel-journal
        • Size 512B
        • SHA256 d237cf4b484ad4685b1a3f574cc5fd49cc6ee5bcdf4d4fc7300e116ecae465be
        • MD5 SHA1 SHA512

        mixpanel-journal

        • Path /data/data/com.ganjing.world/databases/mixpanel-journal
        • Size 8KB
        • SHA256 1327c8b09633de9ce5da1bf48f6bc19f2536edfb666ababa307740ec315e3980
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mixpanel-journal

        • Path /data/data/com.ganjing.world/databases/mixpanel-journal
        • Size 8KB
        • SHA256 13b38df2dead0597c21979257e7cb9df0d88dd6c236d5319cc7501313acc7ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation331957785057909906tmp

        • Path /data/data/com.ganjing.world/files/PersistedInstallation331957785057909906tmp
        • Size 570B
        • SHA256 218d0d47646187a7760921629c730d930288c748d19d7a9289781abd49264edd
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation442526246003380206tmp

        • Path /data/data/com.ganjing.world/files/PersistedInstallation442526246003380206tmp
        • Size 90B
        • SHA256 5de0af93e974657f174b99f2548155c3a8b8e65b1d24ce11a2edd46dc4192467
        • MD5 SHA1 SHA512 TLSH

        app.preferences_pb.tmp

        • Path /data/data/com.ganjing.world/files/datastore/app.preferences_pb.tmp
        • Size 52B
        • SHA256 06dc4cf67b28b6c074c7f5969a8f78dbcb0a8dd37ecc3e0d1aeb3135de960b8a
        • MD5 SHA1 SHA512 TLSH

        app.preferences_pb.tmp

        • Path /data/data/com.ganjing.world/files/datastore/app.preferences_pb.tmp
        • Size 52B
        • SHA256 97889299def6ad9358742df63ed4aa4ed4020c2f822d520576d7f47a8c9b801a
        • MD5 SHA1 SHA512 TLSH

        app.preferences_pb.tmp

        • Path /data/data/com.ganjing.world/files/datastore/app.preferences_pb.tmp
        • Size 52B
        • SHA256 a20aca5e2597fe738b8dd2750579b8b839ae10dba7c26ebad657a2c7794a281b
        • MD5 SHA1 SHA512 TLSH

        app.preferences_pb.tmp

        • Path /data/data/com.ganjing.world/files/datastore/app.preferences_pb.tmp
        • Size 52B
        • SHA256 0b1782278423d4d06b7b977b381a91cb5908e26f1552c71f4a585bdd5f420f02
        • MD5 SHA1 SHA512 TLSH

        app.preferences_pb.tmp

        • Path /data/data/com.ganjing.world/files/datastore/app.preferences_pb.tmp
        • Size 634KB
        • SHA256 3ce6a5d0378c7df31f2ce71e1f1be11e13dae864adcbd5da952aebb030b1add1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.preferences_pb.tmp

        • Path /data/data/com.ganjing.world/files/datastore/app.preferences_pb.tmp
        • Size 52B
        • SHA256 f1914708e465fea45316abcfd0c5db102d7cf8ff0c9a50e9cd291e3a6b78d8e2
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.ganjing.world/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 4d34f8e7558a5ad0805880a30d36e2148eaea5f18caf31f45c232509abebe10e
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.ganjing.world/primary.prof
        • Size 8KB
        • SHA256 3f5b2e2c1861ea520fcdd17af1a3f38f2bab58a98c1b6f4302bb683ae19d2368
        • MD5 SHA1 SHA512 SSDEEP TLSH