a5da5e86be8a5d5544b66c94a65303bbc2ef4ef1509181f3e9cc40d79957e8b2

Analysis

max time kernel
126s
max time network
156s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
27/10/2026, 04:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
android-debug.apk
Size 2.9MB
Sample261027-fg975scf94
SHA256 a5da5e86be8a5d5544b66c94a65303bbc2ef4ef1509181f3e9cc40d79957e8b2
MD5 161c3f2765d13a4702f7037ea7b72e13
SHA1 845a1c0d5892024cde84d2033be790d0b29d1c42
SHA512 c14368f3a5fabbf092011f570a6a638ee27883e624c267dd8bdc4cd1c7d5405bac81a5050342113b308cb5947320a6c7dd824e8e398c9bc38a9a9ecaca2919f0
SSDEEP 49152:vzLnU+ozN2maIrVuBcwG0WbOsXUBS+HEXlRib25iLsvklXZ2JSS7baufmK2:vzLnUNvaIrVuPG0WvEBPEXlRi2OsUXEC
TLSH
T188E52308FEA09069DB43A6B37242ED938A4D9DED65D0DE073A6553C9C422D843787CFE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.suteren.worksaldo.android

net.suteren.worksaldo.android
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5028

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

main

Path /data/data/net.suteren.worksaldo.android/databases/main
Size 24KB
SHA256 5d014bde6929d2057aebea6a10cc3b0ba1c18bb0b8b768114b1a7b02e06c9f27
MD5 001f86a7dc4e0c2bf0f1c8a6c20a0b9a
SHA1 64800f1af66230984c7bb387083d3738b88d4ba3
SHA512 5911c6a1337208f0ff594a0892471a9c13dd2719a6683481e00d6acad1b94825004507c6e5629fde84a3ea4a9f4110f1a6c5f597fdcf40b8da9a242b6fe49aad
SSDEEP 12:TLHP9QHrJk7c5RXXI1yP6AigoRVD3/RmBEyPbD3OwI:TLHVQLO7dJjEGSzI
TLSH
T163B2C08DAB502610C06800BB9CB053660D7CBB0C6373979B2C5100F5FD52176D934DF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 512B
SHA256 81f879f6a25c5350524f34fbc0a52229e8e8679de9433e2f77a5c329a804ea77
MD5 afd165715c6682444a0a7c1294c836ad
SHA1 a33593efb4b99cbef1796fe2aee2c64e80a4e199
SHA512 7db7bfa840d3686dc2b6ca6a85db1b50b0fd6a3e3d8ca139121ac76ac5be23b41d2863cf1bd2f9c80bdea8da9113dd8e25decc5b0493839764e2fb5cc73b8551
MD5 SHA1 SHA512

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 8KB
SHA256 0f241ce200d5bc5263260b66347ca3983b676d5a5d8e8e8996945d3a2adcb423
MD5 27ad690078fa56c89446f23a891a064e
SHA1 bca330a4131ece2129e269e1d681750f9b1c463d
SHA512 8a1c291fb866c6e8640fde78ba09a112da9207a6456a4230bcaa92a8d107dfb28052c3172c7315f2625100670ecf1868d64271d4b3391ed8915cbe354e0fb2b2
SSDEEP 6:7+/l9AyNn1Pifg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKP:7+tdWfqLiuWdwRmBEyPbc
TLSH
T18802228963C02822C91927B794E583600D00E719C962CB172D600C983C03CCCA4A0F24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 8KB
SHA256 386072a5db96f1063eab1d3261044438b53d1c80547fafdb7b26685fee64c167
MD5 dd5ac75ffc2823b2fe5d30ff7d864fa6
SHA1 24d54dab6130347c94b4b89c128959c5dd742497
SHA512 6328c95f2d16f54f16e03566401d9c97db89eb5569365735f7f37466757a6b8cd3e8316a0d9ecf0b95fae3c5d3dcc90bf9e9ff5bae0f6d25eb8e973b17eae702
SSDEEP 6:7+/l9hMPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6LM/z:7+toqLJdTRmBEyPbLLsz
TLSH
T1CD02228963411813D2192FB7A0C883402E20AB14C273CF0719E008E83C03ACCF8A0D80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads