Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    29/06/2026, 00:16

General

  • Target
    ca8818e7_MParivahan.apk
  • Size 688KB
  • Sample260629-akyqmaas7j
  • SHA256 4f80b3a8a59be7b04382a14a80b9fb97dbabef3747e62e22911da7582723612e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.aefyr.sai
    1⤵
    • Loads dropped Dex/Jar
    • Checks the application is allowed to request package installs through the package installer
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5029

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        fetch_15ec6229.tmp

        • Path /data/data/com.aefyr.sai/files/fetch_15ec6229.tmp
        • Size 19.3MB
        • SHA256 7fe655bccbfd69d3da8fe3321e3647c67ddec7457ec9a75d4bcfc22eb58c7f0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data.dat

        • Path /data/data/com.aefyr.sai/files/vault_extract/data.dat
        • Size 20.1MB
        • SHA256 fc24c625c4917e820bfb1e92b5135167b88d9e7cac9af58f27e0549e5d2422b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/com.aefyr.sai/oat/x86_64/[email protected]
        • Size 80B
        • SHA256 ac6b0c80ddef7b8c42fd5e1642a666bf1182dc4150243df22cb459cd6fa9a539
        • MD5 SHA1 SHA512 TLSH
        • Path /data/user/0/com.aefyr.sai/[email protected]
        • Size 417KB
        • SHA256 b6564c512010306cdfb2bb97334e640e1c3da36017c83c8058e97074d19e50ba
        • MD5 SHA1 SHA512 SSDEEP TLSH