1f96d181bc4f8c9667acfba9ec97e8487e52ad6737cf8a42b575d357febd68d6

Analysis

max time kernel
46s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
08/08/2026, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bharatmatka.apk
Size 4.7MB
Sample260808-amvrrael41
SHA256 1f96d181bc4f8c9667acfba9ec97e8487e52ad6737cf8a42b575d357febd68d6
MD5 ac51043a168589db9d08682fd0dc4f0d
SHA1 27bd55905a1fc0ad3442d020ed942567f8ec6f2c
SHA512 98ab3d97730fef8162bcc95b41d79521537957a95bb3bb149845e16dac837ccc1287c8ce19027dd25c27e1d25b1abdf832a58e26dd81cd7bac6144ab78fd6651
SSDEEP 98304:+txV649O3uLkCBUiYjEg9JUxvp2oTwrzSEJdqi:gxV645dBfJxvPET5
TLSH
T16636E056FB69D92FC877503209AA5331265B4D16CA83AB476A4C371C38B76E80F4DBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.bharatmatka

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bharatmatka

com.bharatmatka
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:5087

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events
Size 56KB
SHA256 3a3e46f5b2a624f879d004c0e476c02f5b9aac7265f82cf804fa2844520a5fca
MD5 aa6946fd9ea65ff1ad4f0fbe45153a2f
SHA1 26ce5f842368116458e68ed012a441e5c85798a8
SHA512 68e97afdf07188e495368c006a1764c7ee19143fef31c72243ab3729b5a160378eb2481a3a756dc935efb34cdad17e08903f263fd8c0b9a8f7ac72e14ff1ac4e
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSM:8MEX0wIyNjaM
TLSH
T12543639D1E2C2221C57E283ED3E143635B7C93DF5723926239908DF98DC206974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 6fb9f838e67d1b74b1203ccff8ef5c7ea93fd9797fe637cd43f9e54e937dc960
MD5 e2a0e153ceabe77b827a3a63acce0a7c
SHA1 5a51c5598ecd91619efa2958a38650446d0354e7
SHA512 378f45b42ef4d269a3492b03a14a1913d2fc8e0ebb0dcd1ebe3196b96506bf6ff2c95d3d2e7a11a49f3048d853820beadc03fba523570618689b285ad133c49d
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 98ebf67254145d03592b02ca4f6076cbec6b6f37eebe123f3acba36d4b3b3128
MD5 691fdde227e028300ea6de2fc734d241
SHA1 ec739d7433621cc65c6219ed015aff038beee161
SHA512 f424ff31106604ac6afb477da2ab37ee2bb0680cd7a6e867360de5dae446563661190dde83733aa8e163a911645aceb34df01f85d5c87d3b92948d22e7632227
SSDEEP 6:7+/l96QOn15Rg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK6Hn:7+twRqLiuWdwRmBEyPbLH
TLSH
T15302228963C01832C81D56B794E883420D00EB2DC261CB0B156408983C034CCA4A0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 4362047b2c94940b42a460114c5b1720b86206c10357e3920826444aa8abdeb0
MD5 ce8bb1104793d649771858a4ca38c5ec
SHA1 dacc1b4c5c65b1d1438469d1718c56a88b8e95c3
SHA512 8b0bcb4d4e0edf33d58ac046aa0c23449609088f11fb900dc7ec846da8ec2c6c3a2c6cee5aa5da4fbb962236b21c737d7ecb5c62fdbcd3e0e794a256a38b20d3
SSDEEP 6:7+/l9zL4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKoR9s//t:7+tRkqLJdTRmBEyPbzSt
TLSH
T124022289AB400A13C42A1BB7A0C8A3402EA0A714C223CB2715620898BC066CCB890D50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation3825444900360533605tmp

Path /data/data/com.bharatmatka/files/PersistedInstallation3825444900360533605tmp
Size 90B
SHA256 e864a1184dcfa6dcfaa2594438bd6ddf0beaa54f0c015eb0f78dcf961cd00505
MD5 abc6577bf1756c10c99a74f9f7914848
SHA1 94c3d5cdf36f70645c0b629a3e09586b8fb2a0a6
SHA512 3acd40c5f48c4e383f3666f2fd732b0dbdede1bd99d12b8b92b604115960cf0aacae8d5a298f1e78eb2dc8649ac54280a04a90c52b534050114b4b4b4c419087
TLSH
T1A2B0120246705551C4CDA3061C4CE2002F501A4004498E194A0890D009815D0D143FA4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8375827699580739641tmp

Path /data/data/com.bharatmatka/files/PersistedInstallation8375827699580739641tmp
Size 569B
SHA256 e6755f5321735188e0d95bb6887ff7b3fa77d58fdc741a970e65c68a7130b2f8
MD5 8e1390877bcd04ab93da1a7f842796f3
SHA1 bca4bd04a6583b4d758d12ffd62ea22e78aa12d2
SHA512 ba7af31d98c366293107edf7077c7bd278e63ec38b9984640063c3d2c6d0149573176f1a363972dd9eeb662f630fa3eca84103724f8136780d72aeba5ffcd9ca
TLSH
T1E7F0968661B4BF05D4CC31D22908FD001DA800ED84E384E97FEE00718A70218F027742
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.bharatmatka/files/profileInstalled
Size 24B
SHA256 3754f6df21efbfea96b492317522fd8097b06644e1dbc209e808947b829327ee
MD5 c802eaa505502f305125079233a806ef
SHA1 7e62f1f528a975dbd0a26f9c489b52dbb702b502
SHA512 ddb11eb53b6a5c039a5fd2cd2766541e2c5303b92d3ec11814e430d98d2513bf6b6aa7c617f89da64b20aa5a901b2efd1da21a77250489c587ce605ef23c25ae
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.bharatmatka/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 c9f1f33d8d97ddccb0e4828baff32a45ea763ce60c041fd2eece84c6e9d5683d
MD5 940e9b1bee24d56cc4f2c505950b3455
SHA1 860b9816fbf771553c98082e07d387c88a5fb586
SHA512 28b2fa6d46022011301572e97b0c43398e0f718eb25e3d173d883b1ec168572c42c202cc08b1e45ce10332e74f330e792a92727ce498bad72e7fd87cd2813a77
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.bharatmatka/primary.prof
Size 832B
SHA256 5e217dcb69fcbeaa9135e32a524145ccb8221718e0c071a7d34a75fbe2e32604
MD5 9054b3e1464cdb15cc3a767b1531da75
SHA1 a33b68b2d8ab04afa27d877fbcb80402f1001ed6
SHA512 3cef61529cfb09633291d47d9640a026daf297a58d609c4c41ca86ff2965f3e6ec68ec2bd64fc0c033e1ff0e31e179e668937421742bb978af56d227c40fc7fa
TLSH
T15C0186BE59F35209A15D9E49217A5022CB5E1083EC28C91CA32AEF3045D2860E006FA9
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.bharatmatka/primary.prof
Size 4KB
SHA256 ab4ce3f3985ceac3f8d4231e045d94481c8a8b01b3b5ea1d72b43c4de81b90fc
MD5 0ed2ccec9a8e1cc9d04ec774aa054310
SHA1 042c47a9e40e576e0bdc134d9529e915d4f26ec3
SHA512 b119fc13739cc043fb7da90bd36df3773369e748f7e1f0eb1d2a4c96b1edaa9ff72b1c4f98a8a74693869be98339b2e79834f3f41592450c3017eb4f479c9b1b
SSDEEP 96:mMZC5QNI2aSKY3NuAgZryz3Kh9j27mmPrGuQcku+vrchrKcAw7o8E/YM9:maTNI1Sd3N96ryzi9jKmmccku+voh3AD
TLSH
T106917DE01231A112A2BB4F4CA2C2BF420B484B38DA6C22F21B047C15D25AFA3F58915F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads