d44cfb57edfbd04e3401fb4cc6eb23ee20a0166741d54dc0bf05e2bc2762112b

Analysis

max time kernel
87s
max time network
154s
platform
android-10_x64
resource
android-x64-20260721-en
resource tags

arch:x64arch:x86image:android-x64-20260721-enlocale:en-usos:android-10-x64system
submitted
28/09/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
kalasag.apk
Size 21.1MB
Sample260928-pn4hlstepa
SHA256 d44cfb57edfbd04e3401fb4cc6eb23ee20a0166741d54dc0bf05e2bc2762112b
MD5 681096871d454cc0a20df19a51cd05a9
SHA1 17055697aabb009c70de6dc1f776161369ec9e8f
SHA512 74c9434b5bbff1afcf97382bd599a18b980a1609d4849614896d815ce87b0de59e8ccc624219c995b10cc6887bb9530609aa8be60aeed4e26e82a7076fd52e9c
SSDEEP 393216:etBjccgZs0CIh/acS20LEPnP9PNY7SffaD0JzSr9bqpNd/Nhyjkf2sDRJXC:sBjzz0CkS9EPnD8SfiPxqrd/LtlhC
TLSH
T1C5273308B7D8AE6DC877E0364D5A17B6640BED23C303D397E8AA1789644F9F40F452E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker discovery execution persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.kalasag.security

com.kalasag.security
1⤵
- Schedules tasks to execute at a specified time
PID:5156

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

kalasag_security.db-journal

Path /data/data/com.kalasag.security/databases/kalasag_security.db-journal
Size 512B
SHA256 af2863aa6f9314335827850b891ccbf61ba333c0aa22cb07db223a85cc3bdc0f
MD5 c36f7116e535a0ecd521eece0c4c3eb4
SHA1 6ff1975733c1b32b3dd0654c1c3074fc24dda3fc
SHA512 e3e19fbd8a4ea074eb1f2c2d0604bf15b7b6d9775afffadae1763033231237a56fba0b4512b2da63ef42c8e4738db9ca6c04340025241d05a112ba4cb458da64
MD5 SHA1 SHA512

Submit Download

kalasag_security.db-wal

Path /data/data/com.kalasag.security/databases/kalasag_security.db-wal
Size 16KB
SHA256 d028b4b70d388648ab344ed7427b6be689ed2f056bff43d9c5eecd5f6cfd526e
MD5 2fe36c89c1a044d7660af19d511eaff3
SHA1 1032332f20142c2a9b7f9ad067aeeab6e78252a5
SHA512 2a93d2f7c4ae07ad1757c457ed1975628de5d9c78bd301411e206652da5e8ee37998f3b0b1c875b326225395aa5e352a7a61b8029ba982a34b61db9ff7eb5723
SSDEEP 6:KoQgOloMQggVIJ9FZdrlOERX4PBX4ogLugMBX4suuK+/yQgCg//+UTOw2:KjoM/zdTRmBEyPbP/BgX+UTOw2
TLSH
T18372C2EC93401D52D61D167A81CE83822D91EF1A5A62CB0BDF9214647C4279D9490D4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kalasag_security.db-wal

Path /data/data/com.kalasag.security/databases/kalasag_security.db-wal
Size 104KB
SHA256 2ee2ccb3620a4e3bf9c91a030b42f4a7b2ed4f1e9d68ed59401b0da955546b64
MD5 cf75ac0da9af0eaf972add3dabe9c88b
SHA1 e04bbb1938cace01f41fef2331b0a0574ea0ef83
SHA512 5cdd6b26cc173e2aed645c3cea63b6fd66bea2d31d4326f12120fe7e2fbb9815c6bb8d6b0136fea47d54a44ca1677aef1543e074999f6666a2a76e03fecbd84e
SSDEEP 96:Asr6fR4yAkDfGbkux0b8R8YqxgPA6NEgT5:hyAkDfpO9eR0Z1T5
TLSH
T10BA3A69E0F293753CDEC5675E9D01AD35C6F980E47B62381AFA4C0F2FC812A6B4744A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kalasag_security.db-wal

Path /data/data/com.kalasag.security/databases/kalasag_security.db-wal
Size 189KB
SHA256 2a5cc6517bf6efab6d59cd8238bf2e142a29fa3654e23151a6fdb610dfb981dc
MD5 d4c430d7c01ff849240b37ca7c68739a
SHA1 fd2427b2c228d10687755a0eca67463635a2c412
SHA512 1cee2d834a45b09442da3fba521fa01eb87d9b8b9451a9fcae577bbc506440045a9f963b994026682f5c3085114dd9bf70bdf4df1d6c21c0135c03d72f71637c
SSDEEP 384:0yPlO9eRtIPvIPcpIWlT2dZuMjLNhHK4q5W:0yPlO9eR6PQPcy+T23uMjL7qXA
TLSH
T13614E78F2FBA3E67CCC49136E81428C64B3E4C5D37A761ADB5405193F9027609DA3DA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.kalasag.security/files/profileInstalled
Size 24B
SHA256 e0efc7afc94ea6666879677f4d54ba3c8d762c320d7a4e15d1eb1d287d0bbf93
MD5 d38f330b7465305cb523dd9463489a52
SHA1 5faed3237c89e5a00b55773259315cbe4280024e
SHA512 b56b65833b0923f404ea4c1e8f1c0d9ea32b903540bc8afbe47d9d4fa3fe2ec5e1513684551d04c30c48bce6be602afb76f8b7c3c01e92d398285c5fb4363713
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.kalasag.security/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.kalasag.security/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 0bad8795746ff6549777484ef68aa7eea671e27c86c185069aa0e9fdeb8d05fc
MD5 34fb6897555fea622ff79c350480eceb
SHA1 573e52e9303dae7114435bfeb90355d10c10ce75
SHA512 d3162404ddbbc8a989f50c381f85d598597fe5eb1393e74bc3fb3be1ec9238d5f1fa622f22f6bd4093614481a5200010afef0bb1981e19c86cc4c101f2b23045
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.kalasag.security/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kalasag.security/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 387006ed1b06d03b0c17c35223147d32be9f2d6742b60853a6db681ac8064a5e
MD5 4e6775b7e082853d619f430249a33040
SHA1 eefc94a40ef9e33a99f4c6fe688108e255d00708
SHA512 839108d0a51243dc3df2ce98691c31aeb7a63dfddb83a677f517a394da1a1eea9e9f287667e315ed8b7e76a542ee6d23feebd0feb051b3b096b1d57e578e62e5
SSDEEP 6:KZ7F/xQLtG9lJ9FZdrlOERX4PBX4ogLugMBX4suuK+/zCLJnSHY/l+Ow2:KZ7LWMlXzdTRmBEyPbP/zoJnSHYgOw2
TLSH
T1E7722BA6F3804B5BC915133680C5E3405DE053B98322C727A6F10D942C0B7CCAD90D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kalasag.security/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 d828c4c31498c5f1b75081837c608c26ff03cff4c5ffe38147b1e055d9f7376c
MD5 7cb5a3210b37755c3d494d6ca72bc385
SHA1 b515d0b2d1443be1826527f0b1d472d69fe1b9b2
SHA512 530caedf504b10bf460b457df4179afbc53d01305769505ef63d4d5bc490130f1defc0fdf632420360d478a3b9c809d601c19cc82e86a2363073ed7cab0fbc49
SSDEEP 96:9TcgBjCu6+etidjnZRWzzb8/KeKcK+zSZGddKz+ZD86u0ExV:LjCTtidjnfWzzb83zSZGde+ZD86u0ED
TLSH
T1C8C3328D1F192700C4A958B0E9D01FF1BD3E426E9793E3E125F100B5AED6921DE29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kalasag.security/no_backup/androidx.work.workdb-wal
Size 213KB
SHA256 ac2e15cb7646c67bae162fa2c7115d4652af7124397b1e1728361ca85e035226
MD5 c718de7694157ca754cb35f785aa5192
SHA1 f4195f95f9a98d14b5196569bf17d02d963cd28b
SHA512 d56f359109d68a3f1274db4bd2676a33b8f8cff3ad18a841529468270bea2dde8d65a5ecb96628314b4da93a4cd2801a2c6d7b1e23b8b8da0c8c4d59ae368796
SSDEEP 96:O81DtYc9XlV31DtYj1DtYnv1DtYe1DtY+S:O81DtYcD51DtYj1DtYv1DtYe1DtY+S
TLSH
T18D24C48B3724C55DF358123FFD5A8DE5F4C3AEEE42120A1D2EB6272019F94431E56A70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads