Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    28/07/2026, 12:18

General

  • Target
    sara-user.apk
  • Size 3.8MB
  • Sample260728-pg3bzaha65
  • SHA256 26934ab7fde5df4be5281ced5b424308e17a0a1740963bbb464207730bf083dd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.saraduser.app
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:5055

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation1659429217016401204tmp

        • Path /data/data/com.saraduser.app/files/PersistedInstallation1659429217016401204tmp
        • Size 90B
        • SHA256 58c5fcde294c998c0d589959876fed913480efce4bcef7b2984af496eb42f641
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation473654673054815315tmp

        • Path /data/data/com.saraduser.app/files/PersistedInstallation473654673054815315tmp
        • Size 569B
        • SHA256 d992299c05e921520e79b652cb8100578d90db3b1546a7c21875b0023953a6d3
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.saraduser.app/files/profileInstalled
        • Size 24B
        • SHA256 529a708137ccf5c8b36cf1b35ed8eb3480c1833461a9c0c2b4f885eec013fd07
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.saraduser.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 90c63a43c1efc0fd60c5e2f47d364feb62c8b210f3c5e7c114c2dab51ec7914b
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.saraduser.app/primary.prof
        • Size 1KB
        • SHA256 9a6ef99d82cb11a5235614353c99d1c5d5fefdae5ed2ada2dcdb81308f157d75
        • MD5 SHA1 SHA512 TLSH