9985fb25973479452028bc004a74cb6841ed2d98dbaf737430ae492673e277b4

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/10/2026, 06:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mking.apk
Size 17.2MB
Sample261002-g46c5ssbnd
SHA256 9985fb25973479452028bc004a74cb6841ed2d98dbaf737430ae492673e277b4
MD5 3c556f014ac0b3fa727d83f0cb32fdde
SHA1 c43eefa67bfb5d1575db2467886851808397d7c5
SHA512 d4d5a82f7ad327727226c29bfff91e896bfdae77b16da351ea3715a4a69e60efc1228a5a2b0cbc013dbe2a0212b1e9b00e34a8ac903335b198c02b3411aa5621
SSDEEP 393216:uRFiWS1bIPnMSsgq2EiRpf7YwOoyesEU4eY:yHPnMSsgq2EiRptOo7vU4H
TLSH
T1DB07128AFF58ED2BC47A0032C55A923232678E128F429777794C77187A735E90F45BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.mtkakinggg.onlinemarketresultapp
/data/local/xbin/su	com.mtkakinggg.onlinemarketresultapp
/data/local/bin/su	com.mtkakinggg.onlinemarketresultapp
/system/bin/failsafe/su	com.mtkakinggg.onlinemarketresultapp
/data/local/su	com.mtkakinggg.onlinemarketresultapp
/system/bin/su	com.mtkakinggg.onlinemarketresultapp
/system/xbin/su	com.mtkakinggg.onlinemarketresultapp
/system/sd/xbin/su	com.mtkakinggg.onlinemarketresultapp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mtkakinggg.onlinemarketresultapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mtkakinggg.onlinemarketresultapp

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.mtkakinggg.onlinemarketresultapp

com.mtkakinggg.onlinemarketresultapp
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4691

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/OneSignal.db
Size 52KB
SHA256 e3dadf33a6c10a416d4fb885b9042f14a5e3f6a50746420f5dc1ba00c6dd29f0
MD5 290ded9f9567e7f67f4274850fd03339
SHA1 77ab1f96c76637bfbaebb7d7ea37a662b21e7663
SHA512 0d3b134ed90fe95d47e2d0c8e183cb4aa01143b8698dc450d734ce355e9cb98ce40086e902bd4f7cda406ed2621aa45b4cd67a9a487ea82461f7dd45a77960fc
SSDEEP 24:TLLS57ZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwVy:TE7AcrA0oJxqrKcrObMoOS+
TLSH
T1E833BCCF4B822191EFC760B3105342E44E3B610E889317A63BF760245E83B06D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/OneSignal.db-journal
Size 512B
SHA256 c3ed62c018593b4a7c58586d8ecdbf560e82b00cdf502ed4ca1db5f11d42a89c
MD5 108ebe43e08673d612ee46dfa6275a75
SHA1 9cde17f7ef323c5a0e909bb15d497af879ea0796
SHA512 72a14bbba58b69eb4ef065583c74a699b68a72f8fe8ab31c63b7d369ae3d92b0f653eb5a94faec8aeb8edc529beb10fe88cb3486f6f8fae35cfcaa5870c6b435
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/OneSignal.db-journal
Size 8KB
SHA256 ad22b984c1617ca2a0d5eca67ffedb87411f7e809b4aec132af69fec0130b41d
MD5 990fe7201866071d4882b4f63394bd10
SHA1 541dbfaaaea2ed17ca9f7663b4776c147bf2e7a8
SHA512 ef7b2d61b52948b5a52e967c6a550d820a21645a34aa7bba7440cd061416e0fbb92bfba5a0758ffca92ca28ec7a9b84c4104f57db2ae6a14da00f149c584568f
SSDEEP 6:7+/l9gnn1owrg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKm:7+tXwrqLiuWdYRmBEyPbx
TLSH
T1EB02C08D73C10813CA2D1777A0D483950D00E72CC173CB1726900CA47C8B4CCF4E0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/OneSignal.db-journal
Size 8KB
SHA256 5e21f9130ce7f4513e0696f7fa28e537e2649a68d0f5e3deaefda78d7a6bb2ff
MD5 3b8320c6fbb2588fdff58629e228b6fd
SHA1 381d22ede9a69612180df28b778f0062dee53685
SHA512 423c4f2dea5082412dae715b0e1b69aaf01550450b78e4ad0b28540a7e3fe61301d99bc00f2549a78d276138b669b9dcf5cdaa006e6e78998397456805dad289
SSDEEP 6:7+/l9UqFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKEt/E:7+t5qLJdeWRmBEyPbF1E
TLSH
T1990222C863800903C029277BA0CA83442E50BB289263CF0726D308542C07ECCA890E08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/com.google.android.datatransport.events
Size 56KB
SHA256 511408319f5266aacbbdcae6e2dfb83f12528101f8e3c012731cbe5ba108fb8a
MD5 95a0b2205e64b35dac2834d61d71e7f8
SHA1 753443a0dbe1946b3bb78d68eddb8878c78aa738
SHA512 3700d7df17c9116bd9345f238522d4614b78a5c33a5321362333bed7439bd4341fd0f1b9627269465f12b6327250ad7694179700bc123e431d912da777948e2b
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSE:rAMEX0wIyNjaE
TLSH
T14D43639D5B2C2221C57E283ED7E143635B7C93DF572392623DA08CF98DC246974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 5216d73628181c951dc234980fb6eb3ff6171cb592754774535e4f7322fa6867
MD5 43377cd57d1eb1fb1c7b6a8274d5b0ea
SHA1 fab338d1c423c9b3679eb201d4d80665f8f66bd1
SHA512 65d3fcb6aec20289fcb111dc79db22f4e4af0eeff1f55f870f503ac3ca6fc3cc0e149814cd448dfa3b2d2ab82b1440f646ab674cf083303a0a210a3b362d8fb9
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 2da824ca2d6c77d3d9423f6fbc69b26cc1b9d8c590323b86e61f30ca810304f3
MD5 41caf71b065a2c291ab29194d8c4c411
SHA1 a713925a86f1590f983c98fc76a88b73da35d5d7
SHA512 3a7fc3c5b81063065c9273eb64d7a6684799c4783ce6ccaedd750f5419f950d12ea8bb3289a3b21e8f1d778d57109b401c9dd2173df7ae02fa890fda3b97f9bb
SSDEEP 6:7+/l9sn128lJvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKjA:7+tcpqLiuWdYRmBEyPbX
TLSH
T1EB02C08C63801913CA2D16FB90D683483E00E72C9372CB171A90A8943C075CCE4A0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 4b5b25cb4753e38bef6d169d1c8631745ed59379bb0d794c500fb18157766ea4
MD5 60d46d791f33f448059914633ac387a9
SHA1 9474a6afa3d8b62669e3ad5ed3d7b67b03b80b0e
SHA512 1dbb4eb14bda871fe4bf5112230eef74618842c80fa9b1b910fc9264cb4a0fea281b2f83ddb19579dd431120fbadb03dae75b0f29340a83151afb55cc141aa64
SSDEEP 6:7+/l9rY4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwZHn//0:7+tJYwqLJdeWRmBEyPbv30
TLSH
T1DD02C09977400813C22D1777A0C8D3401E14A7389333CF07169108747E0F7CCE890D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 97cb02da965fe288014fb420f57f8dfe260a065945edffd77af20a2f419984fb
MD5 3a30613963fbc61e03be98d809e38dc4
SHA1 e9e1e6660a8d02340b936ac4dd591f54df505b47
SHA512 a60b4818fe4f56ca81c524b8e99cab9b9ec155c16a60b2feb192aedd19b2740e0951d4939d8d7141de8e220ed1887b5a2618bb1c67114cae13091e238eb58892
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqNsvuoVNs3:TLWuEmO9zmzrfRmBEyPbB93k3
TLSH
T11A72C2CEDF102602C1760636F8CA93A55E64E22D8336EA472B950460AD42449A8A1F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 9e05138139fc21d3a7e574fdab0242a6a282d0d40a00f8c555cd3d893caba1be
MD5 17dc83b310d8645d0da35be66e54a5b3
SHA1 4c362e9fa816a3c3692ca9c5c21e7167e3222efd
SHA512 31fb692ed7b8e21be3a2abaefc1a8c16e5749415ec570f60e7a23cfbaf0438fa781b19b0cbcbd6402a6ce8fe5602af3dfae3e55ada25cdf34dabcf83f4faa579
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6Y:TLiEq9zmzrfRmBEyPbP/P+/0Fl6Eh/X7
TLSH
T1D17268CD7B105703D173477670CF93E11C34A2184733DA0B3B450424AC422856042F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 b1b3871ecbfa370949611a18d5aac46d473d6e4128c9c62094debc969ac59d3e
MD5 fd384367f01375564567f48fefe716a7
SHA1 e114a900180ae604aa0fd98ad6c0ad558951f854
SHA512 72ac77b1694dd1e43aaa404417512e6e4650bd8632982f5d4bb216f0ca531e0cf391d483db1263979b7cda5bb1d61cb2c651b315b80f4bb90be0fc3c359eee1f
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlPWS8+/0Fl6Eh/X7:TLopmzr0GSP/h1499F50lFX1r
TLSH
T1B67259DA7A109707E6734B3560CBD3D12C3872255B23D5077A021A2C6D427865022F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 5c477935926d69001747d190931318f22ebe355fb1463059d516dd0934ce5223
MD5 6512ace35516701f972e22fc8c02c987
SHA1 7cfd8978c1f5548617f9786cb09bf23491a7205d
SHA512 0fff1cdf6c9a437ff0343d6d13b7166ce267f0cf27e3f037acc5e0317301704b2233ef736eceebfb07faf85ef17de1e42f250d8715ffe7b6f2fb969bac645e4f
SSDEEP 24:TLYpmzr0GSP/nhKamNZ2s0499F50lFX1r:TcArSP/ncamNost55wX1r
TLSH
T1187299DAB564DA07F6B34B3861CFD3D2283872660723E6137E061B1C2D427928161F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 2deaedf6c44c1a5fb1d5e27ec9ec3cee6612103b4a2554dfd15cfe9ea31e1cb9
MD5 d2da01bd15c7e05afdbd6e5b958d384c
SHA1 67f540c7b2e223eb41b1b83ea3e3ad9bb288eb1b
SHA512 ee5c110be59666bdfc170b7d10c082b777b450d12a5c2f4f540c15f73ce61a0825f55d9016f28993953e95c8bf4e85f3c8c4f25276a9adddf18e086600bb764d
SSDEEP 24:TL6vpmzr0GSP/M9hKamNZ2s0499F50lFX1f:T2vArSP/M9camNost55wX1f
TLSH
T169722BD9B564DA03F6734B39A1CBD7C12C3971660727E61779061B1C1D427968061F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mtkakinggg.onlinemarketresultapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 cc7a3161c43b4ed6ec6c5c4df6786d70f383b2f2cfeef32fdd05a16644d65a15
MD5 9a8887ec7125ca3118bc6b5f9983b964
SHA1 525ceb343a8ac8b4784f26543ecafa576c5a7749
SHA512 5032cc5a82be6d0ccd95462b6851f82de8a04d6688946d851c7b785777dc929e0e90347bdf8da723871bfe9738667a72bf8b43e1e267959f77732c63bc433bd3
SSDEEP 6:l9bNFlkls16/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WUm7:TL6E6v9zmzrfRmBEyPbP/WUS
TLSH
T1B972C28D9F102606C5760672F4CD93616D14A22A833BAE572BA54460AD4258AA092F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download