Analysis
- max time kernel
37s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
08/08/2026, 00:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
bharatmatka.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bharatmatka.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
General
- Target bharatmatka.apk
- Size 4.7MB
- Sample260808-amvrrael41
- SHA256 1f96d181bc4f8c9667acfba9ec97e8487e52ad6737cf8a42b575d357febd68d6
- MD5 ac51043a168589db9d08682fd0dc4f0d
- SHA1 27bd55905a1fc0ad3442d020ed942567f8ec6f2c
- SHA512 98ab3d97730fef8162bcc95b41d79521537957a95bb3bb149845e16dac837ccc1287c8ce19027dd25c27e1d25b1abdf832a58e26dd81cd7bac6144ab78fd6651
- SSDEEP 98304:+txV649O3uLkCBUiYjEg9JUxvp2oTwrzSEJdqi:gxV645dBfJxvPET5
- TLSH T16636E056FB69D92FC877503209AA5331265B4D16CA83AB476A4C371C38B76E80F4DBCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.bharatmatka - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.bharatmatka
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 61accf61331c3c83747acae3517a36432bbc55b6ef87c70f71b50e66c1eb41b1
- MD5 a44053d00e598d89c712b24c128b5aa4
- SHA1 7c4f93a9a16c871ec7971d2e2d737493abc2d3e1
- SHA512 411a87324886f4580f008af6424ef6d8a6642c1035793fa529ca720f087f6a2bffa7dce46528150a7624c7e03319305d42401f525c1163f4e7dcd465583bc895
- MD5 SHA1 SHA512
- Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-wal
- Size 68KB
- SHA256 0f5626de20f458c0302ccda45a3ddcab1aef5eefbb1fc037d2494a61cd03653b
- MD5 7a74d198dc7663e2acc654ea4912068e
- SHA1 646c2fcc5f76ecdc11facf3be8ddd0c098170549
- SHA512 d33ba7fc9c14ebe7d835ba3c8543b7a8dac458e2f6a2c512f169d4dcb2c2e16a711ebbe36fc35baeb49cb2984c575e04b411ae583bd9af906f2111702df27624
- SSDEEP 48:8XzNSP/0F1g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSP/5AAB/Lvn:M0PfMEX0wIyNjaPZTP
- TLSH T198633F5D2E281671C92D193EC3E143631A7C93DF5322833229A84CF9ACD772E7429879
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.bharatmatka/files/PersistedInstallation3159493867684086580tmp
- Size 90B
- SHA256 4f8a0759a0abae4f3cc8491d70f1ef7611ab1076fc398981e52ab616b720dbf1
- MD5 766d54251d828dc644852d694509992c
- SHA1 45b69f28e026443815b7f0858fae88491e715ba8
- SHA512 1c37472a99215a860960239ea411d6044673459440b54c0826666d244cb80913df6ac1970c6128a871c3918c6ab3adb7820626e983fcf90d8bf7f6e108248e04
- TLSH T1C4B012045A335161C4E6B2123C9FF2402D612C410449CE550A09D18083811D181139A4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.bharatmatka/files/PersistedInstallation4050052222221384352tmp
- Size 570B
- SHA256 dd055e45c1a15234543e28d818c1bd42e2d11cd96b6e44af2bd911a426f48e77
- MD5 978efc8f264ada868cb179910028fbd4
- SHA1 5265c18925f6d958d910b55b7f8c184ff2084bf2
- SHA512 2f0d92eddbc9545a1f2c8330a187f863d88660b41a6271e4f10e281aa88fa804c695f43ea0bcbb09640858d0c821db4f6a8c589f73dbd00fea1b2383509b7bad
- TLSH T167F0964A7F368536C4D7730064ACFD441D3038F69E8605D03F8E40B2D3EA139622B59D
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.bharatmatka/files/profileInstalled
- Size 24B
- SHA256 b9feb8680bb847dba05a04b879e840a980d12aee4229e4408dfda39de0e25ce6
- MD5 810f55ebcfac1860f90d89658d03bbc0
- SHA1 f9aefe929267feaebfbedd1d4ea7d0df2cd246b5
- SHA512 6c13ccfcb763c8034ade618e4ce062d8337e0b13b032638e3030f60234f6f4568aaca0a88360b75c953fe9052c6acbac3c180f2a5bcb1ace8479cdedc1a0d0af
- MD5 SHA1 SHA512
- Path /data/data/com.bharatmatka/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a1d3f8d6a3fed5ea5b665fc240b130a9007bb71b9a21696b555487862e63e3b9
- MD5 6206f5449cff3cfb5547059e18d944a7
- SHA1 289fc19feb5aec3594976d274d65552f31301a43
- SHA512 30051fe00b652e66c585b589a5984c0ecce18911f9975f271dac1b950e33e56329859bece633d3cd3de576ed54481cfab421ab92309c0c7feb9604254c9f3ea8
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bharatmatka/primary.prof
- Size 832B
- SHA256 5e217dcb69fcbeaa9135e32a524145ccb8221718e0c071a7d34a75fbe2e32604
- MD5 9054b3e1464cdb15cc3a767b1531da75
- SHA1 a33b68b2d8ab04afa27d877fbcb80402f1001ed6
- SHA512 3cef61529cfb09633291d47d9640a026daf297a58d609c4c41ca86ff2965f3e6ec68ec2bd64fc0c033e1ff0e31e179e668937421742bb978af56d227c40fc7fa
- TLSH T15C0186BE59F35209A15D9E49217A5022CB5E1083EC28C91CA32AEF3045D2860E006FA9
- MD5 SHA1 SHA512 TLSH