Analysis
- max time kernel
140s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/07/2026, 12:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sara-user.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
sara-user.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
sara-user.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target sara-user.apk
- Size 3.8MB
- Sample260728-pbbl3awarg
- SHA256 26934ab7fde5df4be5281ced5b424308e17a0a1740963bbb464207730bf083dd
- MD5 7210c77148fb21cef29c0e99031e1d46
- SHA1 654518c88219c56f0d16f8080255560a5674a404
- SHA512 797dcc94239024d782eafd8cba357aae15cced8d53fc25b53ac7558bb166046ca93adff1a398f53476b4dbc0477e6cf0e6cc71f218b9d02e0c99c00acd3f4b59
- SSDEEP 98304:TcfHEUJJb41X7aEodcLfGR3QaZ72rCKQ2E9HBQmQtFRrYVHD:ThCJU1X+1cTe3l72rCfrIYD
- TLSH T1EC06E14EF35DB92FC47F503249AAD33622564D168E82A7076858376CE877AD80F4DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.saraduser.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.saraduser.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.saraduser.app/files/PersistedInstallation5439385599786600423tmp
- Size 90B
- SHA256 09b0e6943aad5334cadf5a3f3dc8dfd327d936b84f3bb08b25f531764703f49c
- MD5 39f92b5dea844239d4413aad17eb56a3
- SHA1 64b60d110c1b4e86c875933d46f4b68455fbebb5
- SHA512 f74dd13177fc91a45a4a6c366e255d0d907c071bf93397b976d547230f0a350ca2bd0c5a0fdfaf599e37c3d595af891edf343e521c1d202d06451a62e8ca5e5b
- TLSH T170B012008E30436289D7E3071E4CB2003EB434500819CE440E08D04181D11D58107DD8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.saraduser.app/files/PersistedInstallation6332372892229249698tmp
- Size 569B
- SHA256 8650144e4cb4c72b526feb5c8f423888b7aac68fbc82913acbd32f263510d3fb
- MD5 9c3f8d822eb4aece1591fa63c3efcaab
- SHA1 698e0d4cad29bbc3309c280352a98ff24d7aba6c
- SHA512 e7e88c8c10c7f0fbb92eb57182bfa934e628f21f31ed311841ae25282c9caad2b21b2071ab4c0f9b99456ad842391223e13538b8235b9f74c70886bf6a1e73c0
- TLSH T141F096FA3140833AC8E4623A2F48B9002B7515F1062B0DA9FA8584D4D1ABD9F648BD08
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.saraduser.app/files/profileInstalled
- Size 24B
- SHA256 0ef3074bddc35dae151b7146a63d2f971ebd8241b26331cbc27ea050153e1c4c
- MD5 1d5bb85bbc6e3cc33a43ac622c0637dc
- SHA1 51e1e39000c03e2fa344e43cb992e6699e205836
- SHA512 10075d08f8d29ce809b926434787638cabde39404de850590396965efafd351ae80c36ade308c7de7621188b99fdbc2ce6ac9c68df3c46e7792f7ff88c8bb40a
- MD5 SHA1 SHA512
- Path /data/data/com.saraduser.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 d774989ca275427a2ff1881b4e1770d4958d087b7e5277d906cf1006dd800d61
- MD5 eaef4ef89be5d91ad9b292b3c6a899ea
- SHA1 3672389cd860994efd30910779367d10a73729e4
- SHA512 06d4c71ebc2e848a71803bfff4a434337e35812da98c2bfb964c8c1f274ac2697d8555e4ebd75d53907bf5bc8fb3d046441e43d03f7eda2f88998234ea737f95
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.saraduser.app/primary.prof
- Size 1KB
- SHA256 9a6ef99d82cb11a5235614353c99d1c5d5fefdae5ed2ada2dcdb81308f157d75
- MD5 7601703e0b9a62d6b3e19c57eb5164e5
- SHA1 e2c92578c4281a617c04cbce26607f42be23b85c
- SHA512 35ee79fae53a95c25e0182a2429af3387bf1cc98966b81855ddeb2b073e38b8f676cb0790b9726cc0ab5ace1f6977a0ba14f7b1062496bcc267e0f7f77a821a5
- TLSH T1EC410C09C6948792895BA872C0477FF67FDBE945F9F15D8B583AF58831C10C5403B884
- MD5 SHA1 SHA512 TLSH