Analysis
- max time kernel
138s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
28/07/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sara-user.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
sara-user.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
sara-user.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target sara-user.apk
- Size 3.8MB
- Sample260728-pg3bzaha65
- SHA256 26934ab7fde5df4be5281ced5b424308e17a0a1740963bbb464207730bf083dd
- MD5 7210c77148fb21cef29c0e99031e1d46
- SHA1 654518c88219c56f0d16f8080255560a5674a404
- SHA512 797dcc94239024d782eafd8cba357aae15cced8d53fc25b53ac7558bb166046ca93adff1a398f53476b4dbc0477e6cf0e6cc71f218b9d02e0c99c00acd3f4b59
- SSDEEP 98304:TcfHEUJJb41X7aEodcLfGR3QaZ72rCKQ2E9HBQmQtFRrYVHD:ThCJU1X+1cTe3l72rCfrIYD
- TLSH T1EC06E14EF35DB92FC47F503249AAD33622564D168E82A7076858376CE877AD80F4DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.saraduser.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.saraduser.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.saraduser.app/files/PersistedInstallation1659429217016401204tmp
- Size 90B
- SHA256 58c5fcde294c998c0d589959876fed913480efce4bcef7b2984af496eb42f641
- MD5 77239ca0ba92888460bea3ddadabb45e
- SHA1 34dcc364fdf72b04097ded2df400935b42e90423
- SHA512 639e0af1b61026081acde83a5dde5ffcc2c41d2dfae0f495cffdc82d5da0e1a4b40dc9060f28058e727ca6283eb6df0ea811f21ccfcbc72bd2f11a45fcbbc289
- TLSH T1F8B012448B328192888DB3025CCC92402D4128C5144DCA040A3C909010912E4C283EF4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.saraduser.app/files/PersistedInstallation473654673054815315tmp
- Size 569B
- SHA256 d992299c05e921520e79b652cb8100578d90db3b1546a7c21875b0023953a6d3
- MD5 7cd484891dcd0342ccce599a50e973c3
- SHA1 fa2616efa92a62e5d5e10bbcc98db21b0a5c0bbd
- SHA512 2387ceeace9fcf667731b90122dd45568b459a3972c71cd28806edb00083185d7bd24f5003df62b63a52f5fcb9646b7052992d8d14c27fa2c329fff678cbb0f4
- TLSH T131F0964E92318B0DD84DF18308CCBC050D2900E6260B58F07FEF4494D0638ADD18BC8C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.saraduser.app/files/profileInstalled
- Size 24B
- SHA256 529a708137ccf5c8b36cf1b35ed8eb3480c1833461a9c0c2b4f885eec013fd07
- MD5 d2cd1d57b41f1e3fbd24cffedbfa9d10
- SHA1 5cec80a9dc2462553545cb1c7e6e9f0134622158
- SHA512 412cb25c99fe78cebeaf0dec135eedfa85cc8fca0f2c76cc3d5bc62b885e1841e63605b82feb6c221d0426aa41760efef7bd383f5252aa01e5a4dedf117a123d
- MD5 SHA1 SHA512
- Path /data/data/com.saraduser.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 90c63a43c1efc0fd60c5e2f47d364feb62c8b210f3c5e7c114c2dab51ec7914b
- MD5 586ddcfe6e6bf84627fa7eba195ddfc3
- SHA1 f3c01353de70e34bdd6471b91935cfb8155e8f13
- SHA512 14681eff4621b92c9bf952dac9172198c17bcee5b96b88fbdd20b03426d64980ee8df1fb517c64301e8729102a4260a299b200819e4f70720a27af86ccbc09fa
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.saraduser.app/primary.prof
- Size 1KB
- SHA256 9a6ef99d82cb11a5235614353c99d1c5d5fefdae5ed2ada2dcdb81308f157d75
- MD5 7601703e0b9a62d6b3e19c57eb5164e5
- SHA1 e2c92578c4281a617c04cbce26607f42be23b85c
- SHA512 35ee79fae53a95c25e0182a2429af3387bf1cc98966b81855ddeb2b073e38b8f676cb0790b9726cc0ab5ace1f6977a0ba14f7b1062496bcc267e0f7f77a821a5
- TLSH T1EC410C09C6948792895BA872C0477FF67FDBE945F9F15D8B583AF58831C10C5403B884
- MD5 SHA1 SHA512 TLSH