b718c270f610a404bb2298a41251e76221b4e2f7f868f832e3672efc1449ec57

Analysis

max time kernel
149s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
04/08/2026, 11:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app-release.apk
Size 25.6MB
Sample260804-m7nv6aaa78
SHA256 b718c270f610a404bb2298a41251e76221b4e2f7f868f832e3672efc1449ec57
MD5 533819e2b027275f638942872e498ac3
SHA1 db1454093d3a9df390d3395e653d68274b96c504
SHA512 1feb715f3e64c4fab28b82a1f8f2e93794a498eb002f46f37f9c11a518785b80109941327dfdaf8ea20096f6a255430c35b3ee1d372cd5a2917768a7aa71c343
SSDEEP 786432:7kprgph3lglqd3kzaNxRf4fRvHSq7KYYkr:wVgpVlVdUza7R0J7Mkr
TLSH
T1414733C6F3E9E92EC8B711728C1E06F1126A5D118A939F8B6944775C647BEEC0F44BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.mumbaimbsbm.matka
/system/xbin/su	com.mumbaimbsbm.matka
/system/sd/xbin/su	com.mumbaimbsbm.matka
/system/bin/failsafe/su	com.mumbaimbsbm.matka
/data/local/su	com.mumbaimbsbm.matka
/system/bin/su	com.mumbaimbsbm.matka
/data/local/xbin/su	com.mumbaimbsbm.matka
/data/local/bin/su	com.mumbaimbsbm.matka

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mumbaimbsbm.matka

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mumbaimbsbm.matka

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.mumbaimbsbm.matka

com.mumbaimbsbm.matka
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4786

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.mumbaimbsbm.matka/databases/OneSignal.db
Size 52KB
SHA256 491c9687657ca71661a5cf42a763249f88fa222edaef20eaf552c4599458f99e
MD5 f1427539ecc4cedfa892efc1776ba3ed
SHA1 814607670e99768ae6212224860b0a1fb93733db
SHA512 c3ebbf63c4e876e471848f810e7ad7c0cb56a946230073b5196f7b3ce5d1f144c800ec5787992ff2ee057f712d7c7f1b92b47761294aede13183c796e5ab043d
SSDEEP 24:TLLS57ZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwVw:TE7AcrA0oJxqrKcrObMoOS
TLSH
T194338BCF4B862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mumbaimbsbm.matka/databases/OneSignal.db-journal
Size 512B
SHA256 626eb11808495fb85ff0c5508dd0955309bc6b3f529a2b22bc98bbfc2818158c
MD5 43d43ee452f025d6a34cd7181ef4aefb
SHA1 5cb734255c8033ef195dc9ad77231b4a817e7f71
SHA512 2a2f52d3fbde9013bd45751166cc9aee30b50cc560c737d26e0249bac9f0754f7ec305fb9b9b30afe7859a9828aa2273c2eff8adf555c0d24f4cecc140fc62c5
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.mumbaimbsbm.matka/databases/OneSignal.db-journal
Size 8KB
SHA256 34c3178c328e2b19fec9242ce74d9b02cef92efed07a94d3ab41be533cedbd60
MD5 4d7e8692113cb4f96f75086d14a3f141
SHA1 fe960ceb4a8fa4dac606f33227bb89c85b8a79b8
SHA512 59a5632e5df9b4adb3e0892aec19abe732482f8ad637005f24984367172ebdc0b577bb3729408bcda9bc4d534461e1041494a8d118070216187190723d3e1981
SSDEEP 6:7+/l9ElFn1dsWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKC:7+tKDqLiuWdYRmBEyPbR
TLSH
T1AE02C0CEA3801C13C82D96F790D883480D00EF2C8272CF171690C8983C074CEF4A0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mumbaimbsbm.matka/databases/OneSignal.db-journal
Size 8KB
SHA256 d6e8911822484d1a4816eb7082563b458badba8b46d1d90ac43fa8f501f6722b
MD5 a7a52b5a9dfa780d94ba8382573d63b9
SHA1 b37726d39ddeef9d9710ad4eea157e3e8a047386
SHA512 5180cadc46c4a8c83d8491d5c48c245a79e8233690bf4c8d9e5811e964cec18c7fa1cd3ec37674713bf4429a3c48decc2eeefaba8e1e858b2550a0dfe96065d8
SSDEEP 6:7+/l9hFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKct/w:7+tpqLJdeWRmBEyPbF1w
TLSH
T1EF02809D77410913C92D5777E0DA83541E14E7299373CB5B16F20C547C476CCE8E5D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mumbaimbsbm.matka/databases/google_app_measurement_local.db
Size 16KB
SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
MD5 db36daef009d2615bbd9dfdb4f4d871b
SHA1 48f15ced1db6f00a2e1082ff632fb87d27b4b8df
SHA512 bb61280afeb208d4ef43224b9f871d09eeb24a4660c2b6691f5893f459871eff4ef4a537a3d0df268fa51e74bc55a76ade599d398f6d58fde4975adb8e8b70d6
SSDEEP 6:l9bNFleLIls13FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDE17LzmzsRmBEyPbBvOwVQ
TLSH
T1E272D8CD8F10A206C5270337608AD3954F78551E936796472BA408615E52198B051EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mumbaimbsbm.matka/databases/google_app_measurement_local.db
Size 16KB
SHA256 ce0fc860b21a574ae4c643e7a84a8f2cb73065f5aa349c2ab6975da815d56a97
MD5 cff3ad5df1346137c65d65b036b78ab7
SHA1 fd8521bb9e4d00d6dc2dc41ceec7d7d0240b35c1
SHA512 29869591c85a1afe2eb05d1eb99950e6fc642254fa4261de503456585b3db771327864bc4e064e42518861997c8820f5e6227af59239877e49db8ecbc81aa61c
SSDEEP 12:TL6Ee7LzmzsRmBEyPbP/DvJ+/0Fl6IhWL:TLwHmz3GSP/DvJlFRI
TLSH
T1E6722BCCAF10E703E167073A60CB93D65E38611E5377A65B3A6509649E531C8B152FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mumbaimbsbm.matka/databases/google_app_measurement_local.db
Size 16KB
SHA256 6302ff587968bed2e1d32c5cc9e059a7a9ba74c84aa362d3a5f0621f43a7a233
MD5 ec52a574f0fc51eb2a66cf9900882637
SHA1 517a757dcd8fb3743dd1b436210c6c17abc5f0a4
SHA512 26e410339c24a618b41e9a8fb3732e8afc5f2e02be09cde3a33a3e0103b84cc5b8a06a713e13e65a7d6697a76fd119c8ced890ea00d3a708732a6829a60832fb
SSDEEP 12:TL6UEr7LzmzsRmBEyPbP/h1V49blqYFl3XDvJ+/0Fl6IhWL:TL6fHmz3GSP/h1V499FlDvJlFRI
TLSH
T16C72F089BA24E613E2670B3961CBA3D62939712B0777A6163A191E2C5D533C9A061F48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mumbaimbsbm.matka/databases/google_app_measurement_local.db
Size 16KB
SHA256 137fb7c4d6b5c0b9e75010e76ccdce7b9902a305b9c1694005a90628deda9f2a
MD5 827c12724cd333ede8e766bdb9c366d6
SHA1 8e0838e6f62d98c52c999ebef32d81aebf3d3a8d
SHA512 a832658fd2063bcc04da5a90475384ffbbed2e59490949a4ffceeefa3c604c4d1752c28e877cd9efc4f14ff9ebcb2019f49e8bce564d93f560d2e55c2994fa59
SSDEEP 24:TLQHmz3GSP/DtKaT6yWUV499FlDvJlFRI:T0GKSP/Dga+yWUy5l71RI
TLSH
T1D7726488BAA4D613F2B70B3C11C7D3C62A3E706B1723E3023D0A1B2C5D433959421B15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mumbaimbsbm.matka/databases/google_app_measurement_local.db
Size 16KB
SHA256 6ed1f241ffdec5387c6c16fb13ee9811d91733167b7068e062b79cd91c82b022
MD5 9dc938520c883cfeccce172532692a63
SHA1 ff3b1a48ea2f3c928b40dfca143be7c20050a6ca
SHA512 3be9954fa63042cda06840c6322670c24aaa7b6397c77a2d95414ed0585e3aa0de5b11602ab4fe9cdf8a8543c32abd4d219b56caa0e93fba298d7d300cf344fb
SSDEEP 24:TL0tHmz3GSP/whKaT6yWUV499FlDvJlFRW:TkGKSP//a+yWUy5l71RW
TLSH
T1CF724188BAA8E613F2BB0A3861C7E2D22A3E74670323E20239062B2C5D033D59121B15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.mumbaimbsbm.matka/databases/google_app_measurement_local.db
Size 16KB
SHA256 b83cb9eb47e55420ed49aee80c83a369196d2ecf7725aa26b55ceeb10dd1f115
MD5 8121f29b5a0e306b28ad62471e63e13b
SHA1 a871d1c5a409c56c1f613e8ab4445e3fef8f7435
SHA512 ec5f55bad6a2f428255144ac3b8baf14723fb4711892dd15d24e2569c9ab90b5e5228dfeea86617546c9195e121e3f9d59f9b6b9c6aec79a77101da74728b454
SSDEEP 6:l9bNFlgls10l/FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/Wa:TLuE0l97LzmzsRmBEyPbP/W
TLSH
T18672268D8F10A206C5670236B4CA53961F28512E8377AA472BA40860AE63298B091F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download