204cd0ecaf5347fa89769c03a8191ebf4c80ba644e1c933ae01dd70869c47f6a

Analysis

max time kernel
126s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
27/10/2026, 04:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
android-debug-unaligned.apk
Size 2.9MB
Sample261027-fgjp7abv7j
SHA256 204cd0ecaf5347fa89769c03a8191ebf4c80ba644e1c933ae01dd70869c47f6a
MD5 0061d4ba31affca4895f3d77c554dddf
SHA1 1a806899d079c71dabd1556fb47fcce6e6736ea4
SHA512 562d25d354e287a8bb21470c00a178f096694d82aefe0894d9ede7917be1a6e1478062ec408d1653f7dd424fdc5b07a245995b4c8f5d0ec4c4c15193ea1c79ee
SSDEEP 49152:JyL3xPh6L90qlrGXBiR2lLFM0IlL9RmuPHqZWpuGKf7UBdR/FfrWIc/YTUxuOL9e:JyLhPh6L90q1sBi1SZWof7ghSpQTUxu/
TLSH
T1C3E5234DFAE09415DA0B537A638AE9E75E26A8CD11C0EF17350D92499876C823F13CFE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.suteren.worksaldo.android

net.suteren.worksaldo.android
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5109

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

main

Path /data/data/net.suteren.worksaldo.android/databases/main
Size 24KB
SHA256 b14ae0755b7aee44589f914a6f2148c35781e8b6fe80889b18946e4abcf7ba83
MD5 69c36dfe2a8af93d46b4e5bdb19e5bd8
SHA1 bba7ff395682708bab65eef07d4645e73cbc4320
SHA512 a771fb2a9416a370094f01ecde568937b7f61237c37f35f53fcc9c0dada61a202eb822e6cb46eea8cb862ab7484da8ad3e9e4a0617a761ee87689f690fa6e97a
SSDEEP 12:TL7P9QHrJk7c5RXXI1yP6AigoRVD3/RmBEyPbD3OwI:TL7VQLO7dJjEGSzI
TLSH
T1EDB2709DAB502610C06900BB9CB153660D7CBB1D6773979B2C6500F5FD52176D938DF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 512B
SHA256 2fd47a278cf04303c130205ff8397afbd4318e18dff7ed265a38b858f3b9313d
MD5 34867d41ba5dce587467f126c3d13ba5
SHA1 8f6f4c879f5ab5077794cf53c717bcbc43537e62
SHA512 c2ac4713bc40c0f9ce2fb5791d33b54d13b983643aa41dbdae58827f77e3445f0b18e3fa8bf82a9e7547dbb2db191d4eb5ef211a4a4ddb230aae9f835342a4ca
MD5 SHA1 SHA512

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 8KB
SHA256 6cf2a400cd35260799fcedfee2ec6596f22fab32bca82a2fc558de3d4f23c4ac
MD5 1c8b21c130a49c2baab3c85517b57536
SHA1 46d9b03956fca496da42205ad085af0643a689b6
SHA512 32d6090a830f29e1b6121e88cdda597b5ff4be894e30add3174a0098e1992cfda1408adb0c5fe335752285e101321db4e72e3eb251d77b9aef8ff6cbd749b1d3
SSDEEP 6:7+/l99n1qfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKhR:7+tkqLiuWdwRmBEyPb4R
TLSH
T1D50222C963800D23C81A17B7D0E483500D40E7398569CB57156008AC3C4B4CCA4E0F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-journal

Path /data/data/net.suteren.worksaldo.android/databases/main-journal
Size 8KB
SHA256 832424ba43938bf949719ae7f7c34897cf3219fcb773f48eee9cd5473d0c3770
MD5 a610a887b9662a13192e5b0e1b149e36
SHA1 54f7aa6a8c7c99191a44ae4ab0320af1165457cf
SHA512 0a701d48e2a2dc2dd854b55bc25c3a08fef6c0cdb7bb22866a65c2958712fa7dda8e7b9e2e56314904c39873d828ea9ef0bc45083a281a41d3b05974a774008d
SSDEEP 6:7+/l9d7/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKu5nM/P:7+t74qLJdTRmBEyPbjsP
TLSH
T1C70212A967810923C519A7B794DA83A52E54E7158273CB57156008987C466CCA8D1E58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads