Analysis
- max time kernel
7s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
28/07/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sara-user.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
sara-user.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
sara-user.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target sara-user.apk
- Size 3.8MB
- Sample260728-pg3bzaha65
- SHA256 26934ab7fde5df4be5281ced5b424308e17a0a1740963bbb464207730bf083dd
- MD5 7210c77148fb21cef29c0e99031e1d46
- SHA1 654518c88219c56f0d16f8080255560a5674a404
- SHA512 797dcc94239024d782eafd8cba357aae15cced8d53fc25b53ac7558bb166046ca93adff1a398f53476b4dbc0477e6cf0e6cc71f218b9d02e0c99c00acd3f4b59
- SSDEEP 98304:TcfHEUJJb41X7aEodcLfGR3QaZ72rCKQ2E9HBQmQtFRrYVHD:ThCJU1X+1cTe3l72rCfrIYD
- TLSH T1EC06E14EF35DB92FC47F503249AAD33622564D168E82A7076858376CE877AD80F4DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.saraduser.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.saraduser.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.saraduser.app/files/PersistedInstallation1882514550053006297tmp
- Size 90B
- SHA256 1f8ebd6c672e3422d040f150d64bfd4134793492863645d9528c15889e1a26b7
- MD5 4fb691eec4018f6524f8313e8ace7021
- SHA1 ec5135603c5a3e12822bb4280d1e74e73b8abdab
- SHA512 9633d3790b02b3326741f7b42d3a245e8f36c563564b3fde47acee3d266dbb6049707f423f8eb97e7021da4fc476242c101a0781574f02f13f6cd63a1d7dc155
- TLSH T173B012414A70424188BAE2031C8CD3046D611880098DCE654E08955040812D1C283D98
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.saraduser.app/files/PersistedInstallation2530586584320748729tmp
- Size 569B
- SHA256 ec968f5325604b0b545abb75054c7d0cb809d88d1289bed383d2cd5df4c0feb1
- MD5 3aba1e633bda42cf442320548a012dd3
- SHA1 e13ec0535f78d41f645f822655f25172b7ab1abb
- SHA512 caf4715ded82c1cf24aa319d5f49b60ccead4d737b29c0c2fc9a7dff53f8a29e6bad2e167d5d92f33ddc8c350e52efc99411d6fc95a244789a9f6b63742b69e7
- TLSH T175F0266B25C0479DCDE5F5C30C8CED025D2C14B2274D44B4DDE848E0E832EDAE307858
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.saraduser.app/files/profileInstalled
- Size 24B
- SHA256 6b52085bd0c96409ee90bd5cc24b9e2a56d5eabab2411ca307c912b19e60f9ea
- MD5 d7e9c7b7fb367c92fecbd85e57ed5b0b
- SHA1 ac895bbcddebe34605f810481da9932c6f74de73
- SHA512 23e9810612b5399e69e83551c03a3748a50f319849c4344a1d865263e5f5e94c9b5eeaf43f47617cda1b10cf547617428f4c0374f9d10eb0dacfd1a350ac1e5c
- MD5 SHA1 SHA512
- Path /data/data/com.saraduser.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 bbf14999ceefb31d501b5ee9d8eda123ecd30ccd8caf8b65226a53e6badaa47d
- MD5 95b784aeaa02f2f21dc271675495a99e
- SHA1 3a5520ae2302f381e2504efde6e3157d86995794
- SHA512 ce7d7bf89554c8bf295d32e5863636afff57fa5e816914b9a4be070b5faff0338094828a143efd9b4b2c678336fbd2e9b006678c965add82f99b5b5234ec1707
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.saraduser.app/primary.prof
- Size 1KB
- SHA256 9a6ef99d82cb11a5235614353c99d1c5d5fefdae5ed2ada2dcdb81308f157d75
- MD5 7601703e0b9a62d6b3e19c57eb5164e5
- SHA1 e2c92578c4281a617c04cbce26607f42be23b85c
- SHA512 35ee79fae53a95c25e0182a2429af3387bf1cc98966b81855ddeb2b073e38b8f676cb0790b9726cc0ab5ace1f6977a0ba14f7b1062496bcc267e0f7f77a821a5
- TLSH T1EC410C09C6948792895BA872C0477FF67FDBE945F9F15D8B583AF58831C10C5403B884
- MD5 SHA1 SHA512 TLSH