Analysis
- max time kernel
2s - max time network
151s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
16/08/2026, 20:49
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
base.apk
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
base.apk
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
base.apk
Resource
android-34-x64-arm64-20260325.1-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
base.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
base.apk
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
General
- Target base.apk
- Size 35.4MB
- Sample260816-zl2lcaxbme
- SHA256 5902770c7b11ff61e36a9c3ae300cdf465023a7655a2ce9b34c935a1fede1ade
- MD5 7f69f3b8bb7880312372e793296344cc
- SHA1 3d8f86760db6aa1a39b47c69bb11cb6949a5c896
- SHA512 7b4c9d6d10782c8a972dad452f39e7d41d28102f8950b6f0f3cbe3e2a96a062e55c17c1b6c281c6609f30ce49845af57f9f50d8e2c7bb5df89ada9a646422b7d
- SSDEEP 786432:hinuow7SVoAsW7RCm2XDyFE4Ic/1PNYLRMxEW8cJv3ShhOJLwezSQIqcL:MaSfRCfyFnpFSemyPuhasezRLcL
- TLSH T14B87339AF7645B1EC87244334DEA1631165B4CA78E82A783B918371C78B76F80F49BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.ryan.anymex
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 85ef4b5b9a44e5147d92e43eb960184d1ee71362e0ba1ec338eea00f310c2344
- MD5 cc02369cd1943fc37176b4a163744389
- SHA1 89568e66f0efc614dbdac118ce37e7988e8dff69
- SHA512 de61d07a550747a7dab240fa357ba70853c69d204858f2dede98af205ad3a88bb667c7ea6e3515feaf907e2334776920c21d8e31e3ceb09d311f5ca15ca69ae5
- SSDEEP 6:l9bNFleLIls1juP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDEju7LzmzsRmBEyPbBvOwVQ
- TLSH T15F72D8CD8F10A206C5570337648AD3950F78551E83779647166408605E52198B051E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 967c0ebd4f4e01e21707d5b0cb3e33cab7b464978809559bcf07fd7b332f51ff
- MD5 1f43fb614072d70b8dbc8f89b807ddb5
- SHA1 da857a9557b59c7d51ed668b606e9ee0de21de91
- SHA512 fa974d10968d6fe85b805117fbeae2b97d4812d7060e39baea894e8b1862c00c51515e423c10e2b954af5ac635cd7697350c66d0332685df840c86387f91ac9e
- SSDEEP 12:TL6E1b7LzmzsRmBEyPbP/DvJ+/0Fl6UKBL:TLvHmz3GSP/DvJlFTy
- TLSH T1EB72ABCC9E10E203E16B073A20CB93E20E38610E43379B0B3A6008249D432C8F062FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 7d9e9422daa29391f7b452e27a5497eed43fd7f6cbf6fdd43ea8eabafaa3f8f9
- MD5 2e1f70cc3ddfd95ca4ec8e36c081ee58
- SHA1 f70f14cf57245853bd19202d73d538c3555b573c
- SHA512 74e53dddfa4beab481984b38d3d7ba2bbcef70073113fe02abd7afcd93f9e0a094155976cab2ab6a3bb2fc3874d94f8a396e4ffe21278e637cd2c9c6d8cd454f
- SSDEEP 12:TL6UEA7LzmzsRmBEyPbP/h1V49blqYFlsmjbvJ+/0Fl6UKBL:TL6kHmz3GSP/h1V499FdvJlFTy
- TLSH T1C7728B89BA24E213E2AB0B3D20CBE3D22D39305B07379B0A39554E2C6C433C4B061F48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 8b7caa882d30ef6654661854d26f0cd02d03f7d33ecd6cb77aea842f3a67b231
- MD5 6238f123f01813e0ff6066223b18d91e
- SHA1 70f08f2801f3dab45e6f29303aca4a25baec424c
- SHA512 75a2a071d3f16789617f87853e0a708d3ada7da89c36e12810c817634e08d1c3352a3595c80af8d50b427305906d0b410757d022ee0180f0f0d8a98fb208b760
- MD5 SHA1 SHA512
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 61ea1a64fa43b935dca9b08b82cd1f6967028a091c495d0eb515c74996ee815f
- MD5 231e919ae57d148b5b4e7f2eaac9309a
- SHA1 eced54fb8379dbff2c34f6d71e390c05a6a16394
- SHA512 9187e9c21263e814dcf235ee9a49d65a61533ab1febba647d951023f2b29e6be04270a2d9b637fd5e2dd25f8920aaa27f98589813d4d71ac6c0128e4fb6ca8ba
- SSDEEP 6:7+/l9Ltn1aoGg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKb:7+tlGqLiuWdxBRmBEyPbQ
- TLSH T18402229DA3801822CAE91AB790D4C3440F10EB19C171CB072D500894BDC34CCA4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 4bd10ab3bbb3c68a5e72703dbad0e6a5e1ef2bb45b1bb424771f4649246df105
- MD5 248dbd4649db4589da4130f23e6078e0
- SHA1 18f27f6c250d0e27bb8461ca445133f962c4abd3
- SHA512 e35206063160121e21165045556f2dcefdcb1542880bb5749c5d5748cfe4aa69d5a77822dee79dac8ed65b184994ee5d6caaf8db2ed7ef0c3ded2e901243cc3a
- SSDEEP 6:7+/l+Pg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKrn:7+tSqLJdIRmBEyPbg
- TLSH T12391C0C9E3400803C0296B7790C483804E1067188333CF0B4A9008543C037CDE490D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 35670ea5e2be9d1bd4bb7b277942feb362670a56408c9d46f6d673cf96ee8ffd
- MD5 a03450e94dd7b9ad4616d6620d2f8434
- SHA1 e11c04392f398c090e708525d792fb3c97df8c51
- SHA512 520b293b9efdcbd47eff7b7bf6d16eed16fceee83a41f61f18234879617196b8abd1b1f165aa1c32fee3ca4080fba6189f13d9258d5c77064a27f6dd83bab4b3
- SSDEEP 6:7+/l9kUHPg9bNFlqhO1EAlOERX4PBX4ogLugMBX4suuKIj/sn:7+tOUvqLmqBRmBEyPbLbsn
- TLSH T1F2022288AB800C03C41A177BA0CC83801F00A3168131CB1B07A00C682C024CEB896D81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 67ae7a2e4def2decad7953b7d62107b3ec208bfdfa230e10561a4e4765c16085
- MD5 2a4a781fc5962e351ea12453a50151ea
- SHA1 d142eb5dec41ec5b1b53aa86fe1db256ecab2b72
- SHA512 699ec2c27c35aa4131aa83b3a5239108ec126734a4aae8e435bf2dd79e4ac5a567997f5acb3bb18718660f9cfba0f6fa9d786b67fbffd51f0b7c4c37b4ccc00a
- SSDEEP 6:7+/lvdg9bNFluls1S/ElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKx:7+tFqL8EME9zmzrfRmBEyPbu
- TLSH T1B2912B8DDF112603C1B71BB7B4CF93505E2862198377DD572B990874AD4355A9051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 b7e442a06915fdd025da2d776b3bac366b4d159f3c62a6e0d7072b57d31aac8d
- MD5 1a1358e74b1aeaa6eac7465a1af9f781
- SHA1 f6aa9e97a91ba31edaee9afbd0c143270782d856
- SHA512 fcd606b9f49751a0d910f448c5845c7b47bbf1ef0294c2a2f0f41dd5c48e4b990c99405d5b2ba41562ac11234639f4cc034a22a8e2f58691e27e819fbe35a42c
- SSDEEP 12:7+tBRvJ+/0Fl6UKBDnqL6E1b7LzmzsRmBEyPbS:7+tBRvJlFT4nqLvHmz3GSS
- TLSH T1DC02A3CC9E10E203E17B073E60CB83D11E38610E43776B2B39644924AD432D4F161FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/files/PersistedInstallation5819714965810697881tmp
- Size 568B
- SHA256 2406ff0bbc3598da9d5bb5354708ccaed19d01e5980b2d1f11a97bc838788929
- MD5 d9f0417d5a43c8829a893276b11d6966
- SHA1 cc3720b79534263e971cadc794a5ebed0d6aaa9c
- SHA512 e1a9fa9fd01c4f2253f86e8e70d4966b84bf41baa177936fd35120121d35c2822b9fc03a7f1a6ef3bdcff0f88224b9ac849b5e72e3fd8b53d5101683affcead2
- TLSH T11BF0418362A4490BCCB93A031D4CAF254EA80091462BC6F23E81D080C4D793D8103410
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ryan.anymex/files/PersistedInstallation926737259615489003tmp
- Size 90B
- SHA256 5d47df1b2df5ba9d1a3c128cf5df34090e9e7dd287c8ebb79cb1b68c9380564a
- MD5 00e87617cf58cec049338733657565f7
- SHA1 838753ab6598dd27a1a53ef5b337a0d4432c86f1
- SHA512 811721e47712b4491bb32033746b3932eb2e8da2b29144843bcc4a9ffd2f5330f89b87857732a75459512dc596dd2af7762f59c89a297fb5eec91fec526d72f0
- TLSH T121B0124686B04281C9CAE20B1E4CD2506DD01441040F8A580E0A90D000C71D09113AB4
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Path /data/data/com.ryan.anymex/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Size 359B
- SHA256 fc1059a3d78a18d9f85769276d69a1049f5eb3761abf028adc1077e69c6e1459
- MD5 6a031bc07cea8ac2ff79cf6ce8fd6290
- SHA1 0edf907eb307cf2ea5776eac2a9f4c69abc5cd35
- SHA512 e309cddad3ab4a59e95bf7c95604dc1b04b58c97dd95ea2a8d6ec1e19d40bb7be7c5ad517be94750d629f3bd40607fb65600f38441c9de2d5c82e357007f753a
- TLSH T134E0C001EFE21E907D2B460D7B6C062C4F2FF34261B1507934A80048F50FA84A5C7F0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Path /data/data/com.ryan.anymex/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Size 383B
- SHA256 e38ff117941abcc18afb36ea4a6f54f2467525c3e47310e559f6552ec6d49039
- MD5 60562d99ddb319c89a554f9048d7c150
- SHA1 a4330d0f319369e8f39131939d49f037bb1fe75a
- SHA512 d18851dcfa5bdbb52e771de689d61d608e967145e7c70793a5ef72e289ba47a87809d9c4f12f57f4f92585459e62716d84df46f49f6104c708cdb893a1294902
- TLSH T13AE06101EFD15E916D7B470D7B58062C4F2FF34261B6506938AC0048F50F644A5C7F0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
- MD5 19e5c2bf2a99d61bc5ae4cc8952d1bb0
- SHA1 34d540bf135454e98068819b42b84411fdd62dbf
- SHA512 454bce38a46107d5a4c64d8757475da9ff6ee0025fa1a8212e613d787927cb209217c655ae4ec7adf884c723e5683f473e21df0a606cd40ada4245f8daf9c3ce
- TLSH T10C810454D34000F1D0D407F354D1130D0F07D1D4D5510F0315070041CC415470C74FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 b5684eadc171ac8e227c7f89fafe361f22570589150ed09dbffa61e3b3958d58
- MD5 e2fa0b4198daeb0a2bc0cad8e9cc1086
- SHA1 051467b1b89dad4b6ed4156427c61706d89e3ccc
- SHA512 15977a1ef2f938aa2caac098ecdaab16cf8e5e6e9b992e3ffc754d3f66e585ca2fb419a15940cb3bf58d5c3ac6ed2fec31a53985e97ea9fc599b22c1b2dcb510
- MD5 SHA1 SHA512
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 4e6734c86d8bd812957759432caf72d2816db5e6aa282c64ad6b1517225a2549
- MD5 7c590316169894470a570635a28b493e
- SHA1 3508b7e9bae4f0b1239b91096a197d2f696173d1
- SHA512 2584f03c10dedfe86c3c67560b0ee31f3660d4f0a19f6ef3c776ecb3e1430f3c0a86d6aa90e43355ef118b996f87b69123fc94de9c91f38cb2112e28ee441dc4
- SSDEEP 96:jexPXQLXHTA6+OtidjnZRWzzb8/KeKcK+zSOKz+XD86u0ExV:j0SHThtidjnfWzzb83zSJ+XD86u0ED
- TLSH T1D1C3448F0F596610C19D58F2E4D00FA17D3EC16E8393D3D2A5A200B5EDE2961DA2BCF9
- MD5 SHA1 SHA512 SSDEEP TLSH