20422d3185c30a1c5b1622790a20072da257ef902197b29b82f046143ce661c0

Analysis

max time kernel
6s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
16/09/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DZhClassic-030030108.apk
Size 1.4MB
Sample260916-pgssjaag93
SHA256 20422d3185c30a1c5b1622790a20072da257ef902197b29b82f046143ce661c0
MD5 d1034a746e63f760f793deb7160b69a0
SHA1 867c3e89c45b2e728dca0344bc8d9d5eb820a8be
SHA512 2897ffb7b963d6175ee6bc02172d63646d83d8876d8ae7975023c562d5fabfc9f9381e589790537148863798f6b9af30a0bf9e74e28c5c724fe78acb13e5a585
SSDEEP 24576:I5MyYAnOtu/dS/cf3884L4iB4XWcqUMrAsMxAEZ7IJHoU2JgVaR90bZieQG0Vu3D:I5DOtGS/I3884siGRmNMeEpIJIvgVQu1
TLSH
T157650182B3E95926F4F7DF38AA35415428B9BCC16922D70E0141B15D4DBBF40CEA8FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.embermitre.hanping.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.embermitre.hanping.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.embermitre.hanping.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.embermitre.hanping.app
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
PID:4810

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

temp5217555359645474132.tmp

Path /data/user/0/com.embermitre.hanping.app/files/temp5217555359645474132.tmp
Size 167B
SHA256 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
MD5 0104c301c5e02bd6148b8703d19b3a73
SHA1 7436e0b4b1f8c222c38069890b75fa2baf9ca620
SHA512 84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf
TLSH
T1C4C08CAD6B523C98B8A73B3960C3A1A0E2EC803022D9042202B04A07F0CB1E78EC23D1
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads