022acab061f2b7611694f53240a1872e5d172531cc5924db1eb0924227b38161

Analysis

max time kernel
133s
max time network
163s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
27/10/2026, 04:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
android-release-unaligned.apk
Size 2.8MB
Sample261027-fg6vqacf87
SHA256 022acab061f2b7611694f53240a1872e5d172531cc5924db1eb0924227b38161
MD5 f99fd81d5c726e6012ff284dbba4c7eb
SHA1 617ee05fe51f30e107f8c9bf9b9b4066b5ab2218
SHA512 03a3522a044b1ad47e4d49be0e395807d88aea206fba499c2c7e62b349edbee93eb6fa12142adb396290a9ae151d7c87f5b4ce44147cab2e657cc90164a41742
SSDEEP 49152:OKLvJFArhHAMubeCKwkplOfc3Sj4Z6JYN/UVLc5b/TLKroYcuGEEr/ILjpx:OKLvJFArhH2bFYiySkZ6JYN/e0b+2nT6
TLSH
T1B9D5220EFEB59011DE4386B76546E9E746179DDD65C1DA4B3A0A838AC822E903F13CFC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.suteren.worksaldo.android

net.suteren.worksaldo.android
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5120

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

main

Path /data/data/net.suteren.worksaldo.android/databases/main
Size 24KB
SHA256 32e560f47bdf0b8db26903ba95bdbde563fb4086ff72fa45af27748d994352de
MD5 e4c886ac57b9d8bc908f390209de9a86
SHA1 2fb61a38e5bfe2a2712ee2ad5d6f968c5366de63
SHA512 9ae3198c79d8fdc2cb2fbd289a05939265b83bc62a99a00d6655110ba147ef368e42d45ac42739dd80f751f1e6984093495f5971ddfb12397abdcf3ec3b6b897
SSDEEP 12:TL96P9QHrJk7c5RXXI1yP6AigoRVD3/RmBEyPbD3OwI:TL0VQLO7dJjEGSzI
TLSH
T160B2709DAB502610C06900BB9CB153660D7CBB1D67739B9B2C9500F5FD52176D934DF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 512B
SHA256 dd5d7a8d6183115e28589fb2c4991c059872951a17938b9af8fad28bea294e00
MD5 9a6155f69e56dcb304fd7b26cea72c5a
SHA1 730e78873a047a8c5d0477ff5199086388cd7029
SHA512 661101f3d541d90a16a95252f9022fe15a600e956b9733e7c728e71f57d3e1f6b6c2130a502af5a2debc823798b05402d76ac584cd710882d9ba5622daf1fca8
MD5 SHA1 SHA512

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 8KB
SHA256 1d02e2d75d678e5b01c99c0782358fe888a702fff33f51c60a56c37497411fab
MD5 6d4df33276f68d7bf19ce2e4486a1e3e
SHA1 3f517f3a99fa313a1c5831b22aff950d9004bd0e
SHA512 d2afe26d027926c5fc78b4b28bab2beffa7299fecadca37ef0041a4fb252fae31762b1729088c882459ba59aa6bfb6c530c1bfa8d4e261de913626c6812e7817
SSDEEP 6:7+/l9OOn1mRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKsE:7+tw/RqLiuWdwRmBEyPbLE
TLSH
T195022289AB800922C81916B790D4C34D0E40E71A82B1CB07A57008987C875CCA4A0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 8KB
SHA256 146017056647fd6a298f254384115ded4c50c0dc829e25cf6bc50ffabab795de
MD5 1d38a3e7bdb490fb810c4339ef000a25
SHA1 08081f094571c6ecc29aab1afcbe62e073307517
SHA512 58601d92e81b8904e1c9488cffb49a042f4f34d3bec1c46c5deae9c5629f9a81a74690d5569d11c3bdbf56b3d78838f473a78dca290dd2859a721dd885a7d116
SSDEEP 6:7+/l9wuHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKwR/6t:7+tOwqLJdTRmBEyPbD4
TLSH
T172022299A3800813C4293BF790C883802E30A7148333CB471A6009EC3C82ACCA8A0E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads