b0d512312d455018d08dd82628824fd4464e2170fbc5fe5abb06767825259859

Analysis

max time kernel
49s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
27/08/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NextGen_mParivahan.apk
Size 7.0MB
Sample260827-tmlcvsxfqg
SHA256 b0d512312d455018d08dd82628824fd4464e2170fbc5fe5abb06767825259859
MD5 5dce276315d02d183fa9c65ce74bebda
SHA1 ed975a28e8522254a81fe8d8e3d545a8b5b4ea31
SHA512 9a9f07b247d84a79b83ba304cb4885c8d597b0940f9a1e0cb28e00b5be3a33aac4aa683520b82f72f04c21207fd16c6eef1e2202d541e7d7c49f4fd3d3f6cd17
SSDEEP 196608:R3XBvG8/HVnd7S6MQmy2z9Lw8uh3w9iQb6vXn1IH2ah:dXBvT/tlmzihZQb6/n1I5h
TLSH
T12A76CD96A797491FC4760332DDEB7621F27B8C11AF83C6436C78321D29776A40F98AD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Attempts to obfuscate APK file format 1 TTPs
Applies obfuscation techniques to the APK format in order to hinder analysis

Obfuscated Files or Information
T1406

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.liquidity.sweeps.core

com.liquidity.sweeps.core
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5071

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

T1406

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.liquidity.sweeps.core/files/profileInstalled
Size 24B
SHA256 37b47b77f510582fbb6e1dd009fabdd3c0e8c007d48d7b2fc0ec8aa89b9a50d3
MD5 ddb73458611542cf27ac6ca955e60ffb
SHA1 5ce425e18fc87490762d1af0e9aa3cdeaa223763
SHA512 5a8a4e1754ae04fa4f8415bd6db5634252d025cdaf4a2efe8db5e48673d003d113605b2f8131f291f37317be4f8d72ccfa21193eec9ffd82e799c16356279193
MD5 SHA1 SHA512

Submit Download

base.apk

Path /storage/emulated/0/Android/data/com.liquidity.sweeps.core/files/installer_payload/base.apk
Size 11.8MB
SHA256 b9bee1949f9bc39533450ae234f316f72f8f481cb348e4e9646cce6f818aa295
MD5 0d1c7f45e8c8432154637a9cb7049d82
SHA1 876f13987cd189a56ebb6c07d7faa886a19071eb
SHA512 3e6d6266da78f4829f68eaab8533b1c27a99d0a83bd5237cfafe6983a2fa1ab6f8dec7b009f882274557790654ca88829d9166492e51cfa7dd66f674b405961c
SSDEEP 196608:2fMD4ekFBW9q1azEwoy117KfqcUsvq//xsH2acLEuZIU63e:2fM0vE9q1/LyH7KCcyUUeUL
TLSH
T1DFC6128A9747415EE4B50732CC667325E32BAD040D9B8F873E38325DAE775482F68B9C
MD5 SHA1 SHA512 SSDEEP TLSH