d989e82ee130ec7b694ba0ff57e27de4a1f0e27843ff8d009e4501d51674cf94

Analysis

max time kernel
32s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
04/08/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
85a4802b.apk
Size 15.8MB
Sample260804-pdtweswtcw
SHA256 d989e82ee130ec7b694ba0ff57e27de4a1f0e27843ff8d009e4501d51674cf94
MD5 617c818c28119272c45afa3434672e1c
SHA1 1a8878e4ebb15e15a669322827a39bb8fb2acacc
SHA512 cac3d825137c6a747190eae676731a992f3f8486bbb340b4019e7b60b332e8fc700fce206a315fa92318ca49bc88b7c320f5e4e26ac371982b309ae09025e11d
SSDEEP 393216:z7DLhq48+2rV0Q4rO9tYz6DiKkjdStbQnzb5SQJ5r:fI4f00+Yz1PMbS
TLSH
T1AEF62286F784595ED4F30332853B53A6454B8C268B939FC3AB58363D18B76C00F5ABDA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	dbs.wzla.rsjf

dbs.wzla.rsjf
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5026

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/dbs.wzla.rsjf/files/profileInstalled
Size 24B
SHA256 36a5ed538e9e1b27075f8bae30b9d32e503e6e2f72a784ec14732013b602a6b0
MD5 e4a15121eb1bf4aa7bb77ec23ae17974
SHA1 09c6a4260e7f0dd4121513cce43e9a4c43dfb134
SHA512 184b56d21992c2254ffc7d1c57855a3d32b62641afc848b73db86c0470c22a1307370326bac00949f0c229d99479d6ca1e4469a2338e6cc719da80e99884dc66
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/dbs.wzla.rsjf/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/dbs.wzla.rsjf/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 226918ba1b35876fdd3712a1e1ee10f6413b641367cbc89277350cfc07c623f7
MD5 aba4c9de4c627ba88be9b911ccd3e817
SHA1 78a23bc6788cbf3bb60cad0d31316ca31e022aae
SHA512 2a3016b51135f896f3f6a78b22b536530afe694fd7a6952d375a00f6158b7c71094bce0bb72c7de9575d2bf511fec373d03b59ae70837a16b79877d949a19066
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/dbs.wzla.rsjf/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/dbs.wzla.rsjf/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 4d195715d73efd82e23239e4072c77ea0d519c31e95607a070b82fa2c46f33fa
MD5 15f779151b4e969467ee36dc05f5470e
SHA1 893affd415b7aa11b62cb4ecafa7da20b473e783
SHA512 aab8d1421b0ef8adf2f4803d81b7e30cdb25098a65584509fadc2eaacdf25803aaa3f6d14e8270e17de52c4c91c1934678c065be5d3e38df574245009280f4e3
SSDEEP 6:K23utblKL9FZdrlOERX4PBX4ogLugMBX4suuK+/gHmPsrH/6krH/X4otiOw2:KNwzdTRmBEyPbP/jVzotiOw2
TLSH
T1B272C273E7414752C51C937290C8C3611DA37A295622C7CF656008646C233CCAC54E08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/dbs.wzla.rsjf/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 760f33beeae6ed00a5b094e1d1fceec41d61df0177f3f76a260a7363e7dd38a4
MD5 ca79c4035acc12dd538c2e92c7524437
SHA1 cc6bc8d880a87fbbee88fd260edacbd581187e84
SHA512 836b483b00534b241a9b40f3d9852729f6e9dbc0618b05d4f3573144f6f67b6282be9cc685f27be79ed007aa5f1c02aba066324573bdb40e632b1438b541a481
SSDEEP 96:gU6WAQ6+etidjnZRWzzb8/KeKcK+zSwwtKz+eD86u0ExV:L6WAxtidjnfWzzb83zSe+eD86u0ED
TLSH
T102C332AE0F592700C0A954F0D9D00FF1B93F912E9393E3D679A100B5ADE28A1DD29CF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/dbs.wzla.rsjf/no_backup/androidx.work.workdb-wal
Size 124KB
SHA256 b9898d74cc52746f98861af16b36a1121815d0d60c3eb04b324bfd980743a4ca
MD5 0adf2ed39c29253551b285f10424bef0
SHA1 a3f39d843ddb8fcd72c298e963f5864320c12cac
SHA512 b52e5f657a3dd83dc8cdab0eeffcf22ec83584efe4ac68accd291631967bd0bca1c9bbc751e23f0e5adff15ebbb1679e18ea882eda2143692b5bd6ce6c479de2
SSDEEP 3:xkYaDMqywzXtRKVjWboms7qqvI9kc0XllgoqKXtRKVjWn:i3QqF72VEomaqqvIGc0p2Vq
TLSH
T188C392F35B249913C090177DECBBAAF6A11FEA4060DDECFA880919A13D103C40E24054
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads