1f96d181bc4f8c9667acfba9ec97e8487e52ad6737cf8a42b575d357febd68d6

Analysis

max time kernel
12s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/08/2026, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bharatmatka.apk
Size 4.7MB
Sample260808-amvrrael41
SHA256 1f96d181bc4f8c9667acfba9ec97e8487e52ad6737cf8a42b575d357febd68d6
MD5 ac51043a168589db9d08682fd0dc4f0d
SHA1 27bd55905a1fc0ad3442d020ed942567f8ec6f2c
SHA512 98ab3d97730fef8162bcc95b41d79521537957a95bb3bb149845e16dac837ccc1287c8ce19027dd25c27e1d25b1abdf832a58e26dd81cd7bac6144ab78fd6651
SSDEEP 98304:+txV649O3uLkCBUiYjEg9JUxvp2oTwrzSEJdqi:gxV645dBfJxvPET5
TLSH
T16636E056FB69D92FC877503209AA5331265B4D16CA83AB476A4C371C38B76E80F4DBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4761	com.bharatmatka
/system_ext/framework/androidx.window.sidecar.jar	4761	com.bharatmatka

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.bharatmatka

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bharatmatka

com.bharatmatka
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
PID:4761

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events
Size 56KB
SHA256 c98978c64b662444c34e1a199a0873c9ee71928094ef27be6505433efabe65eb
MD5 ff0537908e0e070afbf610ea08490c65
SHA1 dd05abe6cebd4a37230697b05250d89bcc12ff90
SHA512 f6414a2d3da516517eb8552514b6a14e16882262c783ca2848e69f4b7b10ea6df1704084c0acf3ad72dd67f7a15e27ecabf9df799a1915fe09448648f9bef183
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSC5:rAMEX0wIyNjaY
TLSH
T13B43639D1B3C2221C67E283ED3E143635B7C93DF572392623D908DF98DC246974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 d987d89181f8aa613ae5828d4e4502e6822253cf21677738f73f0bb6cf883d73
MD5 26eda472c8ffa64ddc1f41d536cf105b
SHA1 d5f4ccfed1c347f057aca28262d32df0eb7e3d2c
SHA512 49546f7827cf2d2aca106080b84cdc01f0b7f5ecf02be1d540055348714dcbc3b5cbb3b1094e3713b59a3cce23f8e6bd824508ca4954254044019edb5733afa0
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 0dce6ee5fc7ae2717b212be78bd37fe113c3392ec1a37f1bdae51bc84147957d
MD5 8e66af7490f106613895cddf49d87661
SHA1 214a30d6d226875a345a20f2920d9e4c1acf9b3e
SHA512 e7ed330473f5e56cc58537e676c8ebe6554b7599fb9d64da2a8dd44fc697891b8b53c1b76bcebfd835ff3345da27e2de31334bc6f16dfd2fabace8cc00c4bfe3
SSDEEP 6:7+/l9T+d/Gn1+pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKmWn:7+tx+dRqLiuWdYRmBEyPbYn
TLSH
T100022288A7800813CC39267B90D583680D00AB29A2B1CB27169208A42C078CCA8A0E14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.bharatmatka/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 21edea5afc9c0a6f21ef7323f4d136dd46336fb7c631314082c72e972c21c6d0
MD5 9cc55bc1b15e3bacc4a4ae0ff19ff05d
SHA1 70182fbe62dcf9d05a9e2aa5a9bd2a86a9634585
SHA512 74c2951b46e1f67f61ee16421ce34dac27a2933671e08711c0508bfb19299f513892ee298f0100b92401d702668c9d3b6c1ddde1b5ae5bdbe1903c09a8c83f9f
SSDEEP 6:7+/l9jqluHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK4LH/u:7+tBqiqLJdeWRmBEyPbFfu
TLSH
T1BC02228963400813C0295777B0C883442E14A728A2A7CB07169108A82C066DCAC91D0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation3827097383577217733tmp

Path /data/data/com.bharatmatka/files/PersistedInstallation3827097383577217733tmp
Size 90B
SHA256 ce666ec9879a1d5c79dd3e9945e8ad5efa12f319d6c4a850a08c7d1224e681d1
MD5 c9f9f78b00b776139617114cb4a99c6b
SHA1 1bf76b61ea2791a44a1d003204aafe12bfaaffef
SHA512 20afb0e75c398842c681b6d96d685ce2171d3a9fc810e6ea3c1dcf1998bb494c25f2f6065fb661816863ad37b83c0c8d0528757033c2372868e7006d6697c365
TLSH
T1BEB012008B3143C2CCC7E3022C4C92009D821441088D8A144A0D904001812D481C3EA4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation5248285609873545062tmp

Path /data/data/com.bharatmatka/files/PersistedInstallation5248285609873545062tmp
Size 569B
SHA256 5095482c8fc01c3b2036813a79df5c0c91a39a4664810f682e07bfaa40ac99cf
MD5 7953202e2a2010d14154471896e75521
SHA1 6b695ca65b83833149876ec7ed858021cfb4c5a2
SHA512 9d0900d9fbcb4b9e3c80822a67e077a4278cc8adf643a914c7a0be658e5b8bda0345c55fb300eceaf648e31be4ba9e726d6931176fa651506c3272103c6d6788
TLSH
T1C9F09689BB31854ECCAB1341459C7E181EF414D9DACF09565DDD007003A40DDD1CA45C
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.bharatmatka/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 04cfa0ba2cec4208f3024ae5f89fa2f6050fcef099c16c22bf4cda070d5f3f07
MD5 61e184e020fc089c60ae16afa0d50497
SHA1 1788ec5f17f2eb2eaa42ea7a41306b1c64c91a8b
SHA512 f88630c577d80ec8f64de694e872a420e3d66878669d4a2b0ce09380262b993887baa14450f951e5766300eed95ac0cbc06eeef67646df42893bcdafb5003318
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.bharatmatka/primary.prof
Size 832B
SHA256 5e217dcb69fcbeaa9135e32a524145ccb8221718e0c071a7d34a75fbe2e32604
MD5 9054b3e1464cdb15cc3a767b1531da75
SHA1 a33b68b2d8ab04afa27d877fbcb80402f1001ed6
SHA512 3cef61529cfb09633291d47d9640a026daf297a58d609c4c41ca86ff2965f3e6ec68ec2bd64fc0c033e1ff0e31e179e668937421742bb978af56d227c40fc7fa
TLSH
T15C0186BE59F35209A15D9E49217A5022CB5E1083EC28C91CA32AEF3045D2860E006FA9
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads