0c685119314d58a07376a189acdf9630d6eaefeda97eacbfccea951f6a1dc2d1

Analysis

max time kernel
7s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/11/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
saawariya.apk
Size 33.8MB
Sample261107-phyeeaeg87
SHA256 0c685119314d58a07376a189acdf9630d6eaefeda97eacbfccea951f6a1dc2d1
MD5 188702f082c56c9707dc06eedcd51bab
SHA1 562065ae795d06201eea6e90d432dc2eb3d7cdf8
SHA512 1a975523ee0ca4a5e8a5a4c86c6e64508bbd7b061fc2bdb4e51a0d977f6af07e49aea6b07c36d7e33898d7af413433b74e1186ef6d5bd6b6bf0183d02da0f207
SSDEEP 786432:p6sC8iqtG9Orr2InH2sZd0H8rweHzmDpCZyG98D3iIn7NNjHYzP:pvTrr22HZd0H+tHsK6Rn7/w
TLSH
T1317733E1FB1AA95FEE7B10F60EA5423152660DC28E8296D33428371C34779E90F697DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4796	com.sawariya.game
/system_ext/framework/androidx.window.sidecar.jar	4796	com.sawariya.game

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.sawariya.game

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sawariya.game

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.sawariya.game

com.sawariya.game
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
PID:4796

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GetStorage.gs

Path /data/data/com.sawariya.game/app_flutter/GetStorage.gs
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.sawariya.game/databases/com.google.android.datatransport.events
Size 56KB
SHA256 c0d55959ab66fa48883af8fa1f2d7bdef1521a0a2490a06966dacf70fad3faa7
MD5 d1b0857ad198f2e991d41047a06538f3
SHA1 ba86fa39d03791368a4799d432e4ddd2c997cce7
SHA512 e898d7db85a0a9092697cc8b41ca2b11c7c26aacdc515acaeab61855c1160d3c5c2807280ec12e63d468d37f1bd671f43ec27afad1dc1a9cc8f88593ae48d1de
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS8:rAMEX0wIyNja8
TLSH
T1DB43639D5B2C2221C57E283ED7E143A35B7C93DF572392623DA08CF98DC246974354A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.sawariya.game/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 0a40a65bb304d6f82f4fa3c84daef7a6a2ecc4fd88de89bfc93ff313aef06ca0
MD5 0342be5640f2131939da1f9979fe7cfd
SHA1 a4bfd850dff114b023c85e6f5d264598b856301f
SHA512 61f07b42ae67ea037c2f1bf5f991d81a34c4e9e409db441a49d5a58b2390806c96074a8812c96417adb1c9c57ea71a29c9203dcd6f6de9a57921919960df6a0f
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.sawariya.game/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 2eb3e30fc10073d37b76bc021b88d25e8611d5562a8aa56d583f395e4a0be5d2
MD5 61b981a1e7274e5e7aece057959db9ce
SHA1 ab1014065088b65e18f422a1a0b8805d937595cb
SHA512 ce2127b660df474fb9aebdc59bf7e8c8039751cd5aaee5a3b27c29f91fa313582f86b234e3e64b41b001c4cc05f9d7f2d53c05cd7c8aec3e6148d0548efb0c3b
SSDEEP 6:7+/l9p+6tgn1IO/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKy3:7+tLtTO/nqLiuWdYRmBEyPbD3
TLSH
T1D202C08C67C00A23C83D567790F883400D04EF2E8171CBF716A008943C0F8CCE4A0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.sawariya.game/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 7539c097d7a764d9a47a9c1fb23a2b1d488cb5d1300c5cb1d55fa3585504eba3
MD5 87e600e6f52e3a45800fb0781ae7cb98
SHA1 05f03963a4b2e21f3ccf6066f56762e3d6622159
SHA512 e234b382ee1a37a61d323851e86ad54a7390d28450014cfd6104c8f447719a00f17ca188413cde650914a34f099ea6bab88efe7d74a8c483d06096e209618df8
SSDEEP 6:7+/l9TMVgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKzM/ITT:7+txzqLJdeWRmBEyPbXIf
TLSH
T19202C0C863400A23C32D2F77A0C883401E10FB28A333CB0F26E208643C07ECCE890E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation4171958179907076859tmp

Path /data/data/com.sawariya.game/files/PersistedInstallation4171958179907076859tmp
Size 564B
SHA256 17452906ee2ebc48e3daf9109dfccb502a6aa5d0ee0a6379b52d69c3ee2b0584
MD5 c3bdf9883fe0f320ec83de0060723382
SHA1 1df59561785456fb6e3341bfa4a9039fd269cddd
SHA512 2d8504d3b8c7372fcae2c50c43aed68d4137e8679eb78f7982f8d1cc4cc48d30b19004871f573743e7b58f34ddd6b4d9fd2487c51260c6301a9580cfbd7c22f0
TLSH
T1D1F026BF2779D753AE5D611204CD5A011C4905C21C4746E29E8921D4D79557FE34770A
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation7314941590422865348tmp

Path /data/data/com.sawariya.game/files/PersistedInstallation7314941590422865348tmp
Size 90B
SHA256 ebb1867f3711ba337d7102c08c5467c1fc10d23488914d9d4680e6cddb19f7e0
MD5 75dc1831879f63e48031f79cd433ff2b
SHA1 64dd16ae661e40406a04d1399fc34fc5157dfe1b
SHA512 a1d2e4d89c75aafeb6254b2025e8ee2e624ee3fb98c91b4862fe44a01f9a685a55e48f2472bdd5613f01fbc02686cc3ee19bf37b49712dc62df824e2bd4203b8
TLSH
T1DEB01249577242D2C88AA3032C8E91041D4064405509CA150B0C908441822E1E30BDF5
MD5 SHA1 SHA512 TLSH

Submit Download

flutter_callback_cache.json

Path /data/data/com.sawariya.game/files/flutter_callback_cache.json
Size 226B
SHA256 d569ac2f32d1dc07ea9feb5fd881d78786e724bbd95743de69e2d82a940048c9
MD5 5f4f17fd6c9f7108841542fe7d31ff2b
SHA1 d02595000daa2c151be280c4037aa13a4fb1926b
SHA512 0ad3ef5db835583c9fa0128e1f2636262e34e94869d7ad0f8a6e74e3bae4f82a44ff422e2f4f58299cafbc78faa815b208bd66e47c8169aff9df20e4c26da4ce
TLSH
T177D0A7D44757DC9A076AEA9254E6231A21AD2512684E6C5D88890C1D47E6541A027B0C
MD5 SHA1 SHA512 TLSH

Submit Download

flutter_callback_cache.json

Path /data/data/com.sawariya.game/files/flutter_callback_cache.json
Size 382B
SHA256 c8b227acfb19bc4621179423d23defbd1e315a813e0dac0403e0be07f2ad1f55
MD5 0994d0bb24fc9fb2205ab12c1cbcbf09
SHA1 b0f1bb873b44f114b01e9d8e15fab73b2b1b0779
SHA512 bce5cca48334cd2cf6feb5235062f686f516ed6e906f85417c17bd6677565c195b524c12d35698b94acd85929bb1b729d302ab243af195c7bec85eb5d10b66a7
TLSH
T1EDE068D44BABDCAE1BEAEE9164F2330E215C2543B88E2D8DD8D85D0E0A97511B423B0C
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.sawariya.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 966fabed31ba4b858a3d2fcd24612faddb9606fa6b5b04b86c6b9a499dd95cab
MD5 fc111deacf6871e983ab03927bab99b3
SHA1 66f4b173788f3684931ce144307155f3708e2975
SHA512 c41e0c38fc3ea553e0508f13d85180ec4517987a4f5b2e9eb23cdf322ffe6330927caa23838abfc12c32c7141fc8a24a0741a5ddf63aada8c9912f2dc4388b4e
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.sawariya.game/primary.prof
Size 1KB
SHA256 e2ba1b0edef6732cdb8f77c2ca7e42d328a18fc451c8314fa0a5d947679aca7b
MD5 71525ad70cade49449953df68ed6a32b
SHA1 a58836f140ded0da43ae70bf3d962b7e213d8c6b
SHA512 288eb931a3d58346eadd8b256e3352dc67d26306b5994a16978ef1eadc79f1f7325cd4cd4c3afc45419140093d5f306a18326564619a457ac0c1e1b3f4d49614
TLSH
T127310C8D1968FC4E6B303E57112B3F6A040F9D5221EEE872DA10997C8500B5E403D192
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads