a0f58123591e5e59a942bf5971e893cdc6787fdfc770312c9b75d6415475b614

Analysis

max time kernel
37s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/09/2026, 15:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Tara777.apk
Size 2.4MB
Sample260908-slggvadp21
SHA256 a0f58123591e5e59a942bf5971e893cdc6787fdfc770312c9b75d6415475b614
MD5 c8f26f90251981c9bccb6f8ba545fc30
SHA1 b0dc442c1d082a4f0cb0192f4006ef8c9f34e4a3
SHA512 85aaeedd97fc7e5cd088f6f1aaee68ccf29a4f6270a6e51ca6b58e51fa957184dbcd3de612c2b34506fd263f0b89cd5835c6d5fa6f3a96450b0a960c4f6999b2
SSDEEP 49152:F6Fsoi0Jie6OEXYpRTHMh2BbR4CjxKTW3diWjim3tkoNxD:Fjux6OWYM2dRNjxAWDim3tkoNl
TLSH
T1FDC5BE8AF358992FCC7751320DAA537212574DC28E83AB477948372C68B7AD80F59BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4722	com.taraservice.utillityapp
/system_ext/framework/androidx.window.sidecar.jar	4722	com.taraservice.utillityapp

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.taraservice.utillityapp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.taraservice.utillityapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.taraservice.utillityapp

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.taraservice.utillityapp

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.taraservice.utillityapp

com.taraservice.utillityapp
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4722

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.taraservice.utillityapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 0952d6681921a909f61a47e37e81873fe255985e87cb33d502a51c20dfc1e675
MD5 efeb397fd99b53b00f1e124062284570
SHA1 75535c4eb37d1ba13ade1ce03b080b30268fe647
SHA512 b16c605e12592f501fe95680ba12a0ada842dbac9581b0d1d914733443ae4acd3a04c44891b318ad4223e2a5f665ab7cfa66d02cc622256f24162fa2be2dd151
SSDEEP 12:TLiEq9zmzrfRmBEyPbP/3p/0RT/VM/QCb:TL4pmzr0GSP/3SRT/aF
TLSH
T1EA7255CDBA209607E273437AA4CAD3D23C24316A0363CA577E500A2C6E8264590A1F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.taraservice.utillityapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 6450da158130750eb05d236ae0f7f6ea49e8050ed21249d5d93173199ae2ad8c
MD5 b5ed7f7e93d7d256ff2c74bb680ef0c0
SHA1 1b774042fa7f02f9e469900a6a1f64868f56d8da
SHA512 f3fcbd4982da513cbeeac7dddd6c67dd7dd21acaa2d88e7251052f2a4544346dc2b31275a708b574c4c91c60bea4a0f18802b2a7b0d02d6036737b2a37d2debd
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hZt1kn+/0Fl65VQP4p/0RT/VM/QCb:TLopmzr0GSP/hZtunlFoSRT/aF
TLSH
T12472598DBB10E707E2774736A4CBD3D22C3831A69B23D656BE401B1C6D823815161F10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.taraservice.utillityapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 fa46db27c31e43d82e3b5950b7dfd8a140b049320b2af3362452d071f25e758e
MD5 64b2d64c173e13a22691622661b2f6cd
SHA1 2c1743a7ccdcf28c512ad4514e001ccd483e8b65
SHA512 db4b83f90deb996837d83801202b988dc97bf3b27e40720cb98e8f0dffdfaf2a334379f0cbd1d2516bfda5a6fcb01c36ea26b2fe25470a76e114eb4f1b9acb8c
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/QH49blqYFlekRn+/0Fl65VQP4p/0RT/VM/QCb:TLYpmzr0GSP/s499Fo0nlFoSRT/aF
TLSH
T1637244C9B624E70BF6774739A0CBE3D23C3831A31723D752B9411B1C6D823829261F51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.taraservice.utillityapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 42fb712650f12cd3b58bc7b507264882d743101aed39b8fc4cb6c3b4f1f18eec
MD5 3777449b7b6d375fefc2af3e8a624b2c
SHA1 46199d4d1889afaee48faa7afa808c3c9bab6b93
SHA512 5524c55494bea124284351936b5fb7bab5c4f09a38c71060ee3c6f8f228a34c7c63e2bb949934612fe804bb6fe4ebd417b6b395b4bae62961225ea67e03f0aa8
SSDEEP 24:TL6vpmzr0GSP/oOl5hKamNZ2LTX499Fo0nlFoSRT/aF:T2vArSP/o0camNoLTI5o0noiM
TLSH
T17D724489B268EA03F2774B3991CBD6C2383931A31B23D352B9421B0C6D423819061F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.taraservice.utillityapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 1990e82d4e9b9a8b843872e45c3e255520e0767c7918ae1501102e866221cfa3
MD5 69c941a47739350865e6e413019a953f
SHA1 993e27987031de9f50c2967516706a879825806f
SHA512 4ff0a7473c762f08dacdc829dfa76c97e6df6a3f5dc55069e9775c17162722bfa2aa36bc5678f29cc6d40a9928fc77dee5230e98e53d4bcd3832c471347656e8
SSDEEP 6:l9bNFl6ls1AnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W4HVoFt:TLAE89zmzrfRmBEyPbP/W4HVoFt
TLSH
T1F6722B8D9F103603C677077378CD93B16D18636D83779E572BA604B4FD4348A9161F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.taraservice.utillityapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 d89680093eb3ffca5558b0b53c32e141de1dd7455d1aed241c5f2bfe8aad1405
MD5 bb54d192883ea2c16fd503f4762ff1ac
SHA1 7698392017da684cc2a1a22d41ec1998e8dba4e7
SHA512 296ef704cdff2c29422468f703d35bea454341fa5a2174013c53c087a614fedc1d7b7ddbdbe421df96ba757c5ff056b18f32abfa7ee83486612c1ab800cbbed8
SSDEEP 12:TLWuEmO9zmzrfRmBEyPbBvOwhk/0RT/VM/QCb:TLROpmzr0GSNh/RT/aF
TLSH
T11372558DFB20E207E1774736E8CAE3D23D7431AA0323C617BA910B5C6D8234554A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download