20422d3185c30a1c5b1622790a20072da257ef902197b29b82f046143ce661c0

Analysis

max time kernel
6s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
16/09/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DZhClassic-030030108.apk
Size 1.4MB
Sample260916-pgssjaag93
SHA256 20422d3185c30a1c5b1622790a20072da257ef902197b29b82f046143ce661c0
MD5 d1034a746e63f760f793deb7160b69a0
SHA1 867c3e89c45b2e728dca0344bc8d9d5eb820a8be
SHA512 2897ffb7b963d6175ee6bc02172d63646d83d8876d8ae7975023c562d5fabfc9f9381e589790537148863798f6b9af30a0bf9e74e28c5c724fe78acb13e5a585
SSDEEP 24576:I5MyYAnOtu/dS/cf3884L4iB4XWcqUMrAsMxAEZ7IJHoU2JgVaR90bZieQG0Vu3D:I5DOtGS/I3884siGRmNMeEpIJIvgVQu1
TLSH
T157650182B3E95926F4F7DF38AA35415428B9BCC16922D70E0141B15D4DBBF40CEA8FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.embermitre.hanping.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.embermitre.hanping.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.embermitre.hanping.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.embermitre.hanping.app
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
PID:5072

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

temp7909842898800693001.tmp

Path /data/data/com.embermitre.hanping.app/files/temp7909842898800693001.tmp
Size 167B
SHA256 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
MD5 0104c301c5e02bd6148b8703d19b3a73
SHA1 7436e0b4b1f8c222c38069890b75fa2baf9ca620
SHA512 84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf
TLSH
T1C4C08CAD6B523C98B8A73B3960C3A1A0E2EC803022D9042202B04A07F0CB1E78EC23D1
MD5 SHA1 SHA512 TLSH

Submit Download

com.embermitre.hanping.app_preferences.xml.tmp

Path /storage/emulated/0/Android/data/com.embermitre.dictroid/prefs/com.embermitre.hanping.app_preferences.xml.tmp
Size 480B
SHA256 2da52d5e099c51480857195121063eace33448cc94cbcba8d018327517701bd9
MD5 8a0e96f4775270542ee783742604dec8
SHA1 0e1b46df8cbbc218f5c4bc591dec43bebd0eba18
SHA512 a4dabd461b6098bc040aeabea1c9dbd794423ae18722bc343a7c5183cc5a29b7a773de0f43254fba652648cd494e43564491523b7fd531c0880a60829ebff2e1
TLSH
T194F0E220A8F89E100E610D219C627BAD003EE1F713ED3DE4B4DF216246A69528037963
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads