Overview

overview

7

Static

static

6

Doh-Sasa-D...st.apk

android-9-x86

7

Doh-Sasa-D...st.apk

android-10-x64

7

Doh-Sasa-D...st.apk

android-11-x64

7

Analysis

  • max time kernel
    7s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    24/07/2026, 20:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Doh-Sasa-Direct-latest.apk
  • Size 12.2MB
  • Sample260724-y12dfssbrb
  • SHA256 a506ed7a2a03bcac466980effb3f2ea775e9ce54f201eb5900ec6a8dba78c1e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
collectionexecutionpersistence

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
    collection
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.rtflowtrack.app
    1⤵
    • Reads the content of SMS inbox messages.
    • Schedules tasks to execute at a specified time
    PID:5049

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        rt_flowtrack.db
        • Path /data/data/com.rtflowtrack.app/databases/rt_flowtrack.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        rt_flowtrack.db-journal
        • Path /data/data/com.rtflowtrack.app/databases/rt_flowtrack.db-journal
        • Size 512B
        • SHA256 4bc2043d8350186e0edf4366804c71f5bb2b43058b6f10e96c76751bdf955054
        • MD5 SHA1 SHA512
        Submit Download

        rt_flowtrack.db-wal
        • Path /data/data/com.rtflowtrack.app/databases/rt_flowtrack.db-wal
        • Size 72KB
        • SHA256 d8101872070568a1dfc89fe9bb47ad25bc223df0f4f127ade22ec818974d8b3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rt_flowtrack.db-wal
        • Path /data/data/com.rtflowtrack.app/databases/rt_flowtrack.db-wal
        • Size 120KB
        • SHA256 d29a9f8d6c23e408eb7c4f393bb83243c6e1042330aee74c7e45b3f4cf11dc83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rt_flowtrack.db-wal
        • Path /data/data/com.rtflowtrack.app/databases/rt_flowtrack.db-wal
        • Size 16KB
        • SHA256 085779bd921480bbc4ffbc69b94939d00e56f3a153c3996d87b0b332c92e5882
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        backup_1784924172273.json
        • Path /data/data/com.rtflowtrack.app/files/backups/backup_1784924172273.json
        • Size 150B
        • SHA256 305e7dfe8dd89ddb17a7d83fe99d14566d37cbb52e7e294fedb1550452529478
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.rtflowtrack.app/files/profileInstalled
        • Size 24B
        • SHA256 a461ebdeff7db82a166c37b69243e344b4f85c4dfb4b9a0f6e9db5a24760917c
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.rtflowtrack.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 80ef85c5b26b026a1ada689656288953b470d4ba6e7e703922283d32f81c3285
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.rtflowtrack.app/no_backup/androidx.work.workdb
        • Size 104KB
        • SHA256 1243b671b64725f76de3c247f4e5bbf26b6d0832247342e6c4f665beee682989
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.rtflowtrack.app/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 f52f59d56780d62e36bf80426804c02bba4cd5501ff8451d6ec557bb71fb939e
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.rtflowtrack.app/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.rtflowtrack.app/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 97494e3662e3c49116739b4bf328e8b32d6fe88467a18783fe2692e77d40a722
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.rtflowtrack.app/no_backup/androidx.work.workdb-wal
        • Size 422KB
        • SHA256 cc2d0c72db1b9f04f5c875f871140bdedbb33a80418139b8f5b1f064af0188a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.rtflowtrack.app/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 27732eaed355cd15eafd588646916356eeaae14ad7d21560ce4bf0ef8e43475b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.rtflowtrack.app/primary.prof
        • Size 8KB
        • SHA256 d8f6d2166030eb06c65d9c9d892e5751300d1eab1473219d139f256d574afe1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download