Analysis
- max time kernel
149s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
29/06/2026, 00:16
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
ca8818e7_MParivahan.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ca8818e7_MParivahan.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
ca8818e7_MParivahan.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target ca8818e7_MParivahan.apk
- Size 688KB
- Sample260629-akyqmaas7j
- SHA256 4f80b3a8a59be7b04382a14a80b9fb97dbabef3747e62e22911da7582723612e
- MD5 4303dd69cbe424042ae613ee0ae1af7a
- SHA1 9c594e991c671b32e5f47c89e2dc45e389f10927
- SHA512 b709c731a882d7ff137b2c0cb6be639f3b38b3d2ab07d938423fbbd2a8a538b64e72c3f29b2629e14fcc485e187441ca6a9efbfb3ff89d0be2731769d0636cde
- SSDEEP 12288:oYP4RA0+TocQ24bXPFK2e/mxb0NjR3XjL8q9yFGFkeRKUHy4Se9RY+MeYL:n0+A24b/FKDmF0z3XjgqjbEUZXY+Mx
- TLSH T1B4E41252F735876EE9B205720D1A74A1992BED425E089F2BB290BB3C7573BD50F013CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.aefyr.sai/[email protected] 5029 com.aefyr.sai - Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.aefyr.sai - Checks the presence of a debugger
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.aefyr.sai
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.aefyr.sai/files/fetch_15ec6229.tmp
- Size 19.3MB
- SHA256 7fe655bccbfd69d3da8fe3321e3647c67ddec7457ec9a75d4bcfc22eb58c7f0d
- MD5 5d2a522390a16384975fbed90ca24926
- SHA1 eafebb0b21eebae4bf4879324a78813f16f66be1
- SHA512 d3c916fa9a1457b582d87f5815ed8147d69a36847f9c5bd1a77eeeb67311dbc167afe4f1955c181aab601eb5ff41e0f731984a0ae77d2a8cc2ff7431764ab893
- SSDEEP 393216:24QeVDU8UIoKO+23M3pubiKn+tJEkJEHW6AjzxiTlgT0Bx3aZmm:24NqhIoP+CM3paiceakaHW7QcYm
- TLSH T18C1733B9E96B47E82B06588F44D7A03D5CF94F6975EA6DFFCC273D09820487AE230845
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.aefyr.sai/files/vault_extract/data.dat
- Size 20.1MB
- SHA256 fc24c625c4917e820bfb1e92b5135167b88d9e7cac9af58f27e0549e5d2422b2
- MD5 aea4797439bdd573a81410df69390ceb
- SHA1 8604273e45109369cff4c6953db03122b4c97cad
- SHA512 b1dea583088a28b6af7d44c317ee1f098cb7a8be98b2f33718c4a83f5efdef954686b08e5404fd164bb34c78cb9324631f559b468829ca3aed395cb3ff5ba760
- SSDEEP 393216:nyE/SF+/3ffwdaIqR86vZRuqzmITeltB6CjgxKfiX7Y0leLqsRF:n/rKab86RV6lNfgF77QF
- TLSH T167273386F749443BF0BB253509B98632E7674E4A49CBA7C73944315C5EB76880F2EF88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.aefyr.sai/oat/x86_64/[email protected]
- Size 80B
- SHA256 ac6b0c80ddef7b8c42fd5e1642a666bf1182dc4150243df22cb459cd6fa9a539
- MD5 3583d99b1836be47a1d73df28ea79af4
- SHA1 7a4edc7fd3afded4047ee1ddcfdbb0dd3e059a97
- SHA512 75588ff5d31e132a073e6334fc64903db51d53eab862b18f046e2e422abd47381e6f41d5ea5dc1417b2d013a694d78ad5579c2724f946cd1fba558c59187b092
- TLSH T14CA022BBB8002EC3C8C00E300BAC22C20C80A0CAE20200E20CF0C2CACC230203A00B0F
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.aefyr.sai/[email protected]
- Size 417KB
- SHA256 b6564c512010306cdfb2bb97334e640e1c3da36017c83c8058e97074d19e50ba
- MD5 b30f39400a3f06164eb34b35aeeba046
- SHA1 d1a64206fe6ebe1d05316bb755554067b839db37
- SHA512 335a409527312d2c198927e917f756bf627a251a5d15fceec8fb888c1924c247af511aec328ab114f47255a49703ec2b833fa8ce35a305a24833b5cd854c0921
- SSDEEP 12288:SR5W/oL6iQ1nOhWulGkniiOOmrhC9yrwOOOLiMbvmuurFTeCPZ7O9o64paEGbOru:wW/oL6iQ1nOhWulGkniiOOmrhC9yrwOF
- TLSH T1C394A5C2FE424563C5EA7A7521B71F20F730AE19E78A97570116B272AC423593FB10FA
- MD5 SHA1 SHA512 SSDEEP TLSH