b5f24cace50219b97f52ef98bfe9f2f05ecd77300ff888e11611867e19fa0fb2

Analysis

max time kernel
3s
max time network
161s
platform
android-13_x64
resource
android-33-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
submitted
05/05/2026, 01:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dysmantle-v1.4.1.12-mod.apk
Size 754.9MB
Sample260505-b3a8qaev7v
SHA256 b5f24cace50219b97f52ef98bfe9f2f05ecd77300ff888e11611867e19fa0fb2
MD5 28b9acf9e42215f74fa99e47a30b2882
SHA1 f24b51c9e9380001196c0ea9d025836a6c9d941e
SHA512 aa471c1d8231afe9bb009093c394c490ba3e129ea8aac51cee9b08f48226c304c54a2b7f2b750570d1ee8c055c29084b57a3df5221c27685c2775e9db6ffeb30
SSDEEP 12582912:CQkMakuuqGV/+piDvYr1bo2qG8DcI52Bm3HlEeFsz7NBAISH18wqOlm:CQvakjVhvYOOzRBAIW8G8
TLSH
T10B89BE0A7115DE5AC5549AFAC8030EF9F617DF80C638D3A326243E9E3EF6B540D582B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.the10tons.dysmantle

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.the10tons.dysmantle

com.the10tons.dysmantle
1⤵
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4557

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.the10tons.dysmantle/databases/com.google.android.datatransport.events
Size 56KB
SHA256 03045c5e4ca697e34e2ae6f7eb59624f56f6095b7e9677d2370d7c0c21c35aea
MD5 44f35aa5935729a30fc47a20cfc639b4
SHA1 e6409e9fc6ad7c21caa519e0fa4a59dc2f249d5f
SHA512 a2601fa806498340529bc7792f61da8f1a5ea799325a421fd0fa58228a8d849aa6ed562215b8020c8c2c09057818601a7f96b9441399c9b283d093d39728a35e
SSDEEP 48:TYg59MENZBdUdndVd/729IvdldHlq8/Jq4qPS5lvYpZmXjw6zNhSWgnFL4F3:BMEX0wIyNja3YmXjrDvV
TLSH
T1FE43838D6E3C2221C56E683EE3D143A35A3C83DF4722A3313A984DF98DC246974359A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.the10tons.dysmantle/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 1688083f2ccd3232a209f7f4087c173b928dd5a91e4d66d436a04795c7e4b5e9
MD5 57780a5bb46d0afa150a3d68a7e756ff
SHA1 6b136b38f2fcf3de3ccbafa22579a756c8a1be58
SHA512 e3429801b0de310b96bd1e71695ac47bfaa2eb6b505049e3dcc1f95ab75f06a83d5d226fbdaa5ed835b8194a8585f4b975569978da5085d02931a086658ac88b
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.the10tons.dysmantle/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 f420fd898d4997ca6c9c90be009c65ae0bf5e728f9361600f20669190a3fd28e
MD5 0b6ef08302c27e0de364f2eea5bfee31
SHA1 952820f0fdb945c291cf18f519ee5b1dc19520a5
SHA512 0953af7b3a33bf0c8dc5cc5f24bb49b73eb09a5520850ddb5291840f547a63ca9c28d1e81726b7ecf1b1a6f94268e678d8065d39ed6aea40c6ada6a666dd83ad
SSDEEP 6:7+/l9b4n1Lg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKS5:7+tlCqLiuWd7RmBEyPbR5
TLSH
T1F40222AB67800C12C83A577790E4C3900D02E72882B2CB87455008A42C038CCA8A4D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.the10tons.dysmantle/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 ac787891a4815e6220b6b0912345281be7e94cf6d1c1236514ef9c8f9abf01ae
MD5 421e0c91ebb9934de42222f54ce8efde
SHA1 6c60e09507e77316c5dc7ab8b8ac41da3f0b5303
SHA512 d7ab6052a9ffc7819be5143833d18be991101d3efbf58353ee31580e1ccbe165d6deae766ada6affcf0dd4c45f923d7802ed5678f6c6ec242cc05dbb2c42dfb9
SSDEEP 6:7+/l9fCHPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKOJtU/B:7+t9CvqLJdKBRmBEyPbh0B
TLSH
T1C102228963400A03C41A9777A0DA83501E50A7148323CB07169008583C026CCF8A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.the10tons.dysmantle/databases/com.google.android.datatransport.events-journal
Size 24KB
SHA256 f0d91ca13720fafdf93707a3ff965371103c4c4c4449f796df08f003c74e63f7
MD5 46864e3733c997e2835e9f657ab1bd06
SHA1 f556ededa7a877121f833fb7e4b1be790d01c582
SHA512 95e2c89b610a64b25ca23ce4c78681773d2adf6ca06f80a88db230755042654157cae830672a6d421f2c167b5a715b65498358ac6cf890d6329eb6bdf940caf0
SSDEEP 48:haqIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSV:ha8MEX0wIyNjaV
TLSH
T1E3B2735D193C2621C5BE287EC7E14393993C53DF572392703EA48CFA8DC3469B0755A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

local-in-app-purchases.xml

Path /data/data/com.the10tons.dysmantle/files/10tons/DYSMANTLE/local-in-app-purchases.xml
Size 621B
SHA256 ddc0c2bd2396b0fc395ec6012488a39ff29684bccc44fa590f8a63d05966e32d
MD5 3ef58526bf08606e014892a8eff53b22
SHA1 2e84107566c24625c84f56a284af6d684061de29
SHA512 06a5bb78e2754f2fecc7b20dfdadeb99eb3699cbf9578028eed2a7032b3e6e22f9a73db1c1ea3fa275e1b3ff108edc95b80ca298a701807a0e5cbd477442465f
TLSH
T199F06256481145C1A3326FAA90A04F0322A62B9AC674C70722726DB6137DB2B1C00B6F
MD5 SHA1 SHA512 TLSH

Submit Download

profile-backup-00.save

Path /data/data/com.the10tons.dysmantle/files/10tons/DYSMANTLE/save/0/profile-backup-00.save
Size 4KB
SHA256 71414426fd5b442d9b637974c3f778dc46c75166a15e4563ffaefdb3d2f3ae12
MD5 f1e3998507cecd80a24d36cdbccb89b5
SHA1 a413a8a9a684228004afd24647d9adda46a92609
SHA512 8fe94b803f2ec22f1700052e35f3a1d64fbb7795064697d1b15ee5e69770a862f33ef70fd6bc46dd8a8b13bf681fad79295a73f192c1b7b1bd02a1506a9ace1e
SSDEEP 96:XvBtWpZjBgkK5XH2xRdYfhEkhIIsWlJ2XyUEr8t:XvvWpfgF5XWyh5hIcJDUEot
TLSH
T14A913D3CE64AC9158D8575CE5FC16F703AFCC156A6E58115CE1860478BE6DC08B770E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profile-backup-01.save

Path /data/data/com.the10tons.dysmantle/files/10tons/DYSMANTLE/save/0/profile-backup-01.save
Size 4KB
SHA256 970c70e7078183cce84397b5813b0f6efadeaf1067f96c590c285db351c4db39
MD5 98387c3761d866f12c1b31667d1497db
SHA1 bb2e57df17d1c2ff619f2e9ad29d741ae968ad0f
SHA512 8be3ac2d9caddec3ff56a5f2bf7dac879f1834725fe074a12ffdb7ff34c92e83898c4b60482469e0a8592e3367ba6de09be05fb20a8019d3b8e26d5878b45ac8
SSDEEP 96:skKFMAkjXHV2azvQNi/23yHOgL4VsMNOkTKBJnVDGN8P:sk9nDHQ2QNa2304VsMO5TVDGN8P
TLSH
T1A0915CE882F4C2919F45B40A591B0F3690924C9ADDA03B3A08B784CF9BFF81C4727575
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profile.save

Path /data/data/com.the10tons.dysmantle/files/10tons/DYSMANTLE/save/0/profile.save
Size 4KB
SHA256 7e21e77db2542ed6e7a3cb3398bd5fb8763a313e82d44f47efbc2aa0a9a76217
MD5 cbae300ec7c3120cd50fa9947db7d1f9
SHA1 a29d20b6950bef28784082831101e0582262d1ef
SHA512 bbe993b3b6938ecba283580b3fe0ba8f11335ec49b4345dd20aa200c7363d7d185cf39cbbf63e28c35e9b8f332bec7e5eb003ccfeecb30c6690764cd2b310a22
SSDEEP 96:bhLYnxre5A0AjCzItoY4q9gtCGTb6eOczgySkm7M+YwQM:bOxcICkn4XtXyRUgySpfQM
TLSH
T1C5916BB147E264185F518C0767488B1D24E3455BE0ACBE33D80DE5A3AF0BA9EC72682F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.xml

Path /data/data/com.the10tons.dysmantle/files/10tons/DYSMANTLE/save/index.xml
Size 323B
SHA256 da3ecebbb4ef5ea4eaf52bcd20d17c0179d3ef9613e1579c64c773b4087dec07
MD5 4180de0467787448c1013272206ef44e
SHA1 a8de761f94dbf9ae101b5a251faaff46ae28a4ee
SHA512 eebebcbeb5487a5d9e9666f66eaa15a660f16fecea1704e430643ad1033ca0b28ab48ae7be0ab9e3c90453537429bc5443caffda7a378747fb1c852486d6505e
TLSH
T19EE07DE856AC0316427CAA60B608D116EC312AB68CA992FE540A9914E7A6C58FC1F13E
MD5 SHA1 SHA512 TLSH

Submit Download

index.xml.backup

Path /data/data/com.the10tons.dysmantle/files/10tons/DYSMANTLE/save/index.xml.backup
Size 319B
SHA256 dadb152ae19f67eef8361f3deb8b8deedfa7ce3a3ba90331b43860e3c1434de9
MD5 6652853a27ef6d9548eda53783cf2410
SHA1 8565ab391ab0f743b9167936b3b8cb1adea7aa84
SHA512 4b232dac931a03e7ad152c79e5ae05a8981855a1dd1f5a52ce7ec6d3af70960b2ca961e513cc34861b880a4c89fd719e4deb36e4053a2a6908a2b2cbd1a9b8dd
TLSH
T188E07DCCF27B4850384DE40884AB52BD262D66873B55A063FCCFC0BD956A6C5E55C433
MD5 SHA1 SHA512 TLSH

Submit Download

goldfish_pipe

Path /dev/goldfish_pipe
Size 20B
SHA256 9a8b3970717a730cb2a2934ab30abeec798c5c3f3a7644f5c2a2193cb6ff5f1e
MD5 bca4564994ab838667e58a0b3417909a
SHA1 0254111222011d7e4c0ba18532ab579d000237ef
SHA512 52f01f2890a1d07d39e5bebf6c29fafb6df4580f75023b70fae0fd46b21373904abf8541d39998c005f7470dc16679bf2cffae1f6521b2157d2812ed60a4ac4b
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads