Overview

overview

8

Static

static

6

upload.apk

android-10-x64

upload.apk

android-11-x64

8

upload.apk

android-9-x86

7

Analysis

  • max time kernel
    108s
  • max time network
    113s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/10/2026, 17:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    upload.apk
  • Size 87.5MB
  • Sample261002-vphkesttdv
  • SHA256 4d9651365791356c60b04bd641b89e66c78628e4f273db06d89b14d6b0245a4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscovery

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 4 IoCs
    defense_evasion
  • Checks known Qemu files. 1 TTPs 2 IoCs

    Checks for known Qemu files that exist on Android virtual device images.

    defense_evasion
  • Checks known Qemu pipes. 1 TTPs 1 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

    defense_evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.zhiliaoapp.musically
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu files.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Checks CPU information
    • Checks memory information
    PID:4802

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies-journal
        • Path /data/user/0/com.zhiliaoapp.musically/app_webview/Default/Cookies-journal
        • Size 12KB
        • SHA256 d38f00c8d80b1ad96a501a1110b2d6dbcb9c2e4d824b36b380fbdd0aae17b97b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/user/0/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events
        • Size 32KB
        • SHA256 f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 163f6d196505637c136d47c76138d3a579662cce17258ce65ed9c1a7d47699ad
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 1a36df5039ad7505cc4dc3b19bb95815e578f08296b30e92c7b209b89b45fda0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 eb99e681a034b50483cf5ff563c54e91cb831006d84a3755b021006879b05d1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_dynamic_detection_xx
        • Path /data/user/0/com.zhiliaoapp.musically/databases/db_dynamic_detection_xx
        • Size 32KB
        • SHA256 9dec126ed77c2605b97fd780f459b21c12eb1b784747d06e7055ce3b1c60ea1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_dynamic_detection_xx-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/db_dynamic_detection_xx-journal
        • Size 512B
        • SHA256 39816f70fc17553dd772c541bbb6d138b683a5bb0191db061987dc0df79bfd59
        • MD5 SHA1 SHA512
        Submit Download

        db_dynamic_detection_xx-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/db_dynamic_detection_xx-journal
        • Size 8KB
        • SHA256 f8240dd0d6a589549f20857c051f3ab0fdef905dec979c261c02c41d8b0c0857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_dynamic_detection_xx-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/db_dynamic_detection_xx-journal
        • Size 8KB
        • SHA256 f0c076921c5ad95ee4bd3ba4beeaa90025677b665f3d5c5c8fe7fa3f0decbede
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3b38e151ef41f24f394c19e8976a9f02e9d7e7f395850c6e34432142f6885783
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 deb769326eb9450a7db552eba2ffcd4a6f29bbc93ef068416d4b55451d6e38c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 07d230c5c556fcdf1b8d01755aac8049d4fca2f9c0134d7d6b2cb3e5a44a6c04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 31fe867dd6b84813c2a63095de35f1a29dba300b1dabeb2e7ea577badcd435e9
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a4132f3b40f982fe788a53f51aa280286de77b091a3eae5b547cc6d053de352e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 062542ecf23c8b408e73f2a8514409e5b6504bc975ff914d701c364d56461bb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f88fbb3195a69ff1fdd4d1464db5671d4096fed60a68d9b6cef2c684a660f3b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 58f22470fdf13615c682ccb8e03e5f85b4375c1b0c46637ffa08e869fa36d35c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 98a54bad68852d599a26e2156aeca1bd37b6da7553126418031b16c72303c868
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        splashsdk.db
        • Path /data/user/0/com.zhiliaoapp.musically/databases/splashsdk.db
        • Size 24KB
        • SHA256 e1e3a212f7fc7e76f1b3e740c92d06adc543aa5d5788ace96088b2c7e895ab16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        splashsdk.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/splashsdk.db-journal
        • Size 512B
        • SHA256 7625e6dd0c69550103952d9513ea88a926c2f46ce7fc6184da0bef1d64ccbea9
        • MD5 SHA1 SHA512
        Submit Download

        splashsdk.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/splashsdk.db-journal
        • Size 8KB
        • SHA256 501cba0d2e994fde9dad1e5d5d5b33bf210346da42f7a9ef44d0b07c446ed991
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        splashsdk.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/splashsdk.db-journal
        • Size 8KB
        • SHA256 5e0a0599e5b22f2215d4009bff8ffbd1b7970752a1ace6e49a801ec81789ae74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ss_app_log.db
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db
        • Size 40KB
        • SHA256 1cd92771d25a4eaad0e84aefeb45790f80a7347076a6385756af33239ac33c94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ss_app_log.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db-journal
        • Size 512B
        • SHA256 b6e1b8db5c5d86910ca8aa9662557953f37856f1339f9d4e5c27ff414091c80d
        • MD5 SHA1 SHA512
        Submit Download

        ss_app_log.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db-journal
        • Size 8KB
        • SHA256 18831f596046d5400a7c57ae476a3f1ce4a40b0f0a09c390623283d5dc7435c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ss_app_log.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db-journal
        • Size 8KB
        • SHA256 31f61259e39f55c76ab4b3e7188bd8fe3f1ebf82b7dfb1c9f130e802050612a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ss_app_log.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db-journal
        • Size 12KB
        • SHA256 c00000400b7c3887356afd975227edbbcb3a1c025b08ca1072270c152afb2bb3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ss_app_log.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db-journal
        • Size 12KB
        • SHA256 bdd09d4c1297fc42758b8d0858d16353d2dc65468efdeb644407c5450de5b596
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ss_app_log.db-journal
        • Path /data/user/0/com.zhiliaoapp.musically/databases/ss_app_log.db-journal
        • Size 12KB
        • SHA256 182d548508f6676861c0e6b9ecc1e78abb7947de8925ebf5daf851474fe270fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation2011507071573591878tmp
        • Path /data/user/0/com.zhiliaoapp.musically/files/PersistedInstallation2011507071573591878tmp
        • Size 90B
        • SHA256 8793a9ae29d464599a628907bc6123a76f6b0806c37813b88ffac811f84dcef3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4327204892307790733tmp
        • Path /data/user/0/com.zhiliaoapp.musically/files/PersistedInstallation4327204892307790733tmp
        • Size 562B
        • SHA256 fcc6b8a47a29ae31764208cf34617898fa17401264be25d52f97a2716cd4eed8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        assets.czl
        • Path /data/user/0/com.zhiliaoapp.musically/files/assets.czl
        • Size 2KB
        • SHA256 e3302e023616e1a4df27662b882b2d11fb28271bd12907d944a3deda38e51832
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        current.times
        • Path /data/user/0/com.zhiliaoapp.musically/files/issueCrashTimes/current.times
        • Size 14B
        • SHA256 72a9c3e4776d830571c371bc2bf23d1c9ce6ab9db0586f04dd70d93836f4e2bb
        • MD5 SHA1 SHA512
        Submit Download

        fds.txt
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/CrashCommonLog/110b73e92b209110-1790961054836G/fds.txt
        • Size 4KB
        • SHA256 1ce1cbee238706107e4f6e86f1c2b4698757b9b6147033d043408ac090c613bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        malloc.txt
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/CrashCommonLog/110b73e92b209110-1790961054836G/malloc.txt
        • Size 11KB
        • SHA256 d83f181e763c9a54511218a0f18be1b6c3010625d6c3bdf027c8d8ec0c6f3bde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1790961054997_launch_110b73e92b209110-1790961054836G_normal_1790961054836_normal_8915798c9c7743eG.0
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/CrashLogJava/1790961054997_launch_110b73e92b209110-1790961054836G_normal_1790961054836_normal_8915798c9c7743eG/1790961054997_launch_110b73e92b209110-1790961054836G_normal_1790961054836_normal_8915798c9c7743eG.0
        • Size 4KB
        • SHA256 24e096e9ca94902342f60a7095c8e36e7f7ec94cf5687fa0b608368c20ebe995
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        logEventStack
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/CrashLogJava/1790961054997_launch_110b73e92b209110-1790961054836G_normal_1790961054836_normal_8915798c9c7743eG/logEventStack
        • Size 4KB
        • SHA256 1878969240547a4a2f6895e3c50a93fde7699d707ed9b86cf446f757ae47190c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.zhiliaoapp.musically.txt
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/ProcessTrack/20728/com.zhiliaoapp.musically.txt
        • Size 41B
        • SHA256 960a1299fe686f2b433268658d5bda437695f8ed8185cd25aa5af1b927261974
        • MD5 SHA1 SHA512
        Submit Download

        did
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/did
        • Size 19B
        • SHA256 2eebea0a62d6cfe033a6ee30549b0187d8235d08ce3c195190556036df4a1e6c
        • MD5 SHA1 SHA512
        Submit Download

        1790961054836-1790961056884.allData
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1790961054836-1790961056884.allData
        • Size 2B
        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
        • MD5 SHA1 SHA512
        Submit Download

        1790961054836-1790961056884.ctx2
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1790961054836-1790961056884.ctx2
        • Size 1KB
        • SHA256 65f8c4f2251f4eef4c38499c3f56870e8a74c75656529f5ea99bb326ad3525a3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1790961054836-1790961056898.ctx2
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/RuntimeContext/main/1790961054836-1790961056898.ctx2
        • Size 1KB
        • SHA256 3da62d22965c12f6fe0a810dd9480356afa7911883f080f9e25312e14dd3b0b7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        configFile
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/configCrash/configFile
        • Size 4KB
        • SHA256 527d4551732eb7b64361fa86ed19ad2b8028899bbbb7d0a8e77dc6316bb99775
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        configInvalid
        • Path /data/user/0/com.zhiliaoapp.musically/files/npth/configCrash/configInvalid
        • Size 59B
        • SHA256 a5fe75277043c41b1b576a3a855babf71cba45152bbc7d35bb114cfcd2538fe2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        aweme-app.xml
        • Path /data/user/0/com.zhiliaoapp.musically/shared_prefs/aweme-app.xml
        • Size 120B
        • SHA256 080d0a4422b66349430de81fc78e429b4a2eba3871a9b587a6bba143a4e426de
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        default_config.xml
        • Path /data/user/0/com.zhiliaoapp.musically/shared_prefs/default_config.xml
        • Size 115B
        • SHA256 fda8824887934be3e4e68b4926b76bd86a80e4da7825e12c8f57821a4d01980c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        key_language_sp_key.xml
        • Path /data/user/0/com.zhiliaoapp.musically/shared_prefs/key_language_sp_key.xml
        • Size 116B
        • SHA256 64b63ed9c08e7bc28931f6ebcaa1bb87da32a99089869a7ccf3b45408e893fb9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        timerslack_ns
        • Path /proc/4840/timerslack_ns
        • Size 8B
        • SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
        • MD5 SHA1 SHA512
        Submit Download

        timerslack_ns
        • Path /proc/4845/timerslack_ns
        • Size 5B
        • SHA256 60734f174b2035e5b2ba85fef8c648cc0cb18c5995b419d3cd1c025c5b09d0c7
        • MD5 SHA1 SHA512
        Submit Download