Analysis
- max time kernel
3s - max time network
154s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
16/08/2026, 20:49
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
base.apk
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
base.apk
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
base.apk
Resource
android-34-x64-arm64-20260325.1-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
base.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
base.apk
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
General
- Target base.apk
- Size 35.4MB
- Sample260816-zl2lcaxbme
- SHA256 5902770c7b11ff61e36a9c3ae300cdf465023a7655a2ce9b34c935a1fede1ade
- MD5 7f69f3b8bb7880312372e793296344cc
- SHA1 3d8f86760db6aa1a39b47c69bb11cb6949a5c896
- SHA512 7b4c9d6d10782c8a972dad452f39e7d41d28102f8950b6f0f3cbe3e2a96a062e55c17c1b6c281c6609f30ce49845af57f9f50d8e2c7bb5df89ada9a646422b7d
- SSDEEP 786432:hinuow7SVoAsW7RCm2XDyFE4Ic/1PNYLRMxEW8cJv3ShhOJLwezSQIqcL:MaSfRCfyFnpFSemyPuhasezRLcL
- TLSH T14B87339AF7645B1EC87244334DEA1631165B4CA78E82A783B918371C78B76F80F49BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
- MD5 dd9a2fe8f7bc14471ac42c324c607a30
- SHA1 f88c5a77e00aec2c00147b84e0d346cab31804f1
- SHA512 f5edea485e7aec27b231844b38e7741e8cfc64ffca299467c5761093e8e173ffef1ab808db141519cba717fbc2d28265b5cc316e6221f6997433bb3ff0c4e0da
- SSDEEP 6:l9bNFleLIls1uGo9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0Dq3:TLDEuX9F7LzmzsRmBEyPbBvOwVQ
- TLSH T1F172D8CD8F10A206C517033760CAD3950F78551E83779647166408605E52598B451E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 23eef08248f1182134dee01cdd3bff86580bb809a1b7b1c8b81df3a2e032686d
- MD5 94d68c5919280444bf0d2228a4296aaf
- SHA1 66010733efc796318ad57af803a2da3b95b9750e
- SHA512 63fde5b55ee8b9eda48bc9892cc94c199ac2d305e0a02cc60425fba54d99d65505b722568380690035facd42cd11f75f25fb83b39394a804654f6b3d60390c8d
- SSDEEP 12:TL6ET9F7LzmzsRmBEyPbP/DvJ+/0Fl6RBL:TLlnHmz3GSP/DvJlFW
- TLSH T121722BCD6E10E603E12B073A60CF93E61E38611E4767965B3A6409649E536C8F152FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 4486132f084ece54d1773f28f6a5215bbaa355d70ba793ac51d8c548b22f08f6
- MD5 6eca22fc051640b179f2d22b2eed4433
- SHA1 be9c7febad295295c683bbc1d75dadfbeff43a57
- SHA512 e17c0961a0f2d5275e3eb1af881591e6635ce1c96f7870dc18fb095031757df6caaaa804d303ed88147ba488cbca1894c4111170a39200bffa0845bc386fec79
- SSDEEP 12:TL6UEI/9F7LzmzsRmBEyPbP/h1V49blqYFlszOjbvJ+/0Fl6RBL:TL6Y/nHmz3GSP/h1V499FxvJlFW
- TLSH T1B3728489BA24E203E22B0B3920CFE3E62D39705F0B279A0639554A2C5D433C8B061F88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 5827a6adaea4e0faf1e645b4a6a0c4abd02cd417434ba81d1ea20f71c56af9b7
- MD5 d789c40fe1464f5c79c893042fbfcef7
- SHA1 074bff839adb89d5c30b3f8ed7075a18b13c83de
- SHA512 73362c66b4be16b3d4e5f32b9227fed2d5f405177a75520009edb3aa6ca2473ed5d11ad1a73b50300f39a2c4fe3c7a7b98b1bb46a5d160ddd48be287b6eff3f8
- MD5 SHA1 SHA512
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 e82ab1f7ab13564f1a8cbb941e0661c7e2f678c1fa7d2873e3ae2812aebeb16b
- MD5 e2d11c9192056e70899f361775d2d503
- SHA1 985d6e9b8701189002a180aa8176c5ef4c957c68
- SHA512 ab7a7bfb8a374222fa2efcfd42a9671311dba592bfd221382c971309fb51e9e5ccd4747b3e07db403a1de33ef728fec7809189cac0422226bbb92a7393f08f0f
- SSDEEP 6:7+/l9cbn1Uog9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKO:7+t7oqLiuWdQoRmBEyPbB
- TLSH T11B02C08CA7800813CA2D277794D483580D20F73DC971CB070D5008D47C074CCECA0F08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 e7412f8517e8b2bf5eccdf3385198f181389c999dcc1284dd78b1de92270ba20
- MD5 a11a08ddc8af50f9659dccada023922d
- SHA1 0e6bba8f65f1a5f97645dad397d197ef02656f2b
- SHA512 75acafe8bccc3456316c7fd005cc84fd601bba15d9cc2fc50ed55a5adfec9b9e4e3e241e062361a823d56cd22d2d3948d651fbde597bc725f80dbc0c1bd80cf7
- SSDEEP 6:7+/l5/Pg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKjC:7+t5nqLJdvloRmBEyPbx
- TLSH T15391C08967400813C0291F7790D4C3580D50AF398333CB0706500C547C0B6CCECD0D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 edfa331de79d255b52dc1adeb856fb4543f3b194db7c797f2c6c7cf2dd0270e8
- MD5 44b411adaa41820d69f8ccabfc7b47c1
- SHA1 50c3c1e3c28e1518af2099c08663f79130489a61
- SHA512 e4ad0ff6f80760fdac9828edfa73b85b30b17c66828042f3757778c656e63258162d69bc27992331eeefda50df1f3a652383b54f88974ac09f8e4917f56f5f4b
- SSDEEP 6:7+/l9hMQOPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuK6Rs//CQ:7+tQDqLmqioRmBEyPbLRsXZ
- TLSH T1A70222886BC00C03C059167B90DE83680E20EB288171CF07096008686C035CCACA8D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 3dfc1bf60726314cf7f45ae6772236bf46ca9d83aa93154cde07ff65fa3c4bec
- MD5 5e7855995dc7e15ae8533ef2d5edec8b
- SHA1 ae741d3a8850a51713fd0106a70d60809938d2ea
- SHA512 231ae006d1b614cbe2c15789ea4d916369216aa28d8abf564c1a204809dd1cca8e2b81e46ae2cf5dfaf346576a2196a0b666a49b92f2c7c52930f0080f01fef4
- SSDEEP 6:7+/lBXBg9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK/n:7+tXqL8Ef9n9zmzrfRmBEyPb0n
- TLSH T1DC912BCDDF112603C1774B77B4CF93655D28621D8377DD572BA80474AD435899051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 d3eabea03cf2fa88bd134c148150bad7860fb40385f2ffd02e61341dbd7313c8
- MD5 9db15546a65c9ad3ae70169509871467
- SHA1 e00d8a1adb5a5c97ba00504b3ce2dff037c40783
- SHA512 c92d9e4339f3affbe338e54d4edf89e5654d70e458133da45a577608b177be8a4383aa34aa720a75e413477017ba1ef22de036d998be8683664125129ab76634
- SSDEEP 12:7+tBRvJ+/0Fl6RBAGtnqL6ET9F7LzmzsRmBEyPbw:7+tBRvJlFgnqLlnHmz3GSw
- TLSH T1CB02A3CC9E14E603E16B073E60CF83DA1E38610F4367961B3A6009749E432D4F051FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.ryan.anymex/files/PersistedInstallation1966318673140527532tmp
- Size 569B
- SHA256 55ac79465504f781daf8984bbb1c2044a0b0b0c04de7fd698ed9cdcbb20fbf35
- MD5 a2ed4f18dd1ff40366dfdbaf15b396b2
- SHA1 6c242d99f4459107a07a9d9926975dee8fc064d3
- SHA512 f8edcb1624bae62315b317de443e4c7c8a89639bfe80e26ee11625077ff4e2c123bae95c27dae53ab6119c1115639d36e613754a83e2960e4c4a3e2a269495ad
- TLSH T1CDF026457EA94B69F8F37789194C7C155E4618F9830A45FBFFDE48A048C1DED6147044
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ryan.anymex/files/PersistedInstallation81277944943460589tmp
- Size 90B
- SHA256 9921de440910c599e486d17ee78b46f5d3e53154b991daf26fb711219b69d6ed
- MD5 889019da55354616009f9ae0de643c19
- SHA1 472297227d70b3be92052fb37a823cb058022d8f
- SHA512 9d4ec0b41d9caab5ca6c86765ad406cabb5f15e60c0e41607cb817358e506a361da9c8770c18ee1816ee9eb59bd4f2b8a5f076e98dcc000fcba77606b70f3d62
- TLSH T16CB012409632834185C6F3062C4CE1405D4134420419CA484B0CE48080825D4C103DD4
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Path /data/data/com.ryan.anymex/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Size 359B
- SHA256 5439501844a54f140894a929e0d7a73ebc13e15c674231b2d903d156ca0ac878
- MD5 06d6880fbffb778bddddc823c5e61472
- SHA1 93b983454fe3e6f2ec82c6c05f218deed4abaf1d
- SHA512 926509326f1c0ac16338ae9170d61ba98fbbef63d5153286c5d42f33cd6611430173c6a4e56305f38d62096a75d384e706713f061733cf7cfc7c3022790924f1
- TLSH T132E0D811EFE21E902D6B464D7B68162C4F6FF35251F1506934A80588B54A944A5C7E0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Path /data/data/com.ryan.anymex/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NTU5NjMxMjI0ODU6YW5kcm9pZDo5MjhhMTUxZDY4MjA1OGEzM2RiYTdj.preferences_pb.tmp
- Size 383B
- SHA256 28a708bb7c0405140930ba4bca93de396871013c86a12db93edbe68244454167
- MD5 8d24db871fdf0091e56c7e86f3e60c9e
- SHA1 ead1148c44985cb965fa941f7aa90041ea8358fb
- SHA512 a0eb32082d5f7632bca59302734930557a7dfa284ac942bd464868d7907726bb1874134377eab74b42c8b31b4a05c84b79e02fa2532f347150349bcfd67945c8
- TLSH T103E02B00EFD21E906D6B470D7B58062C0B2FB34251F6416934AC0188B50F544A5C6A0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 0b25531899192fde560e4edda6b4cec456346b422e9399762c5dfe902ebe9349
- MD5 3cc4bc9fea1eedacb2048d4686521ab9
- SHA1 5086d37ca0afc71509185045ba0be4f78b2dfd0c
- SHA512 16e347e07767825d14d434cf181ee30ca4d293ef58b09992d7e35806dcba2771ee76f3c42f00d263ea79b1fdf3fac53e67395fa039d9f70f4d7e7b7cf745e20f
- MD5 SHA1 SHA512
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ryan.anymex/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 0a8d6814e658556f3508fbdd2cecb568247ab2b00ff7e66cb09048f9540ebb08
- MD5 950f88a1184bf1a96d1d843767f5cb62
- SHA1 358a22a8a86df6d72aaa209275c02bb2df6bc132
- SHA512 e1eb8d00a782c2b630f6f26e6a4276e5fed4a721ab59d25af2c7812f99a50f6266adb7e675174d7552e94f3d9f05b785b190bc207e93638948a236cecb2825a9
- SSDEEP 96:6wbPKuCRG6+OtidjnZRWzzb8/KeKcK+zSWKz+XD86u0ExV:68KuqbtidjnfWzzb83zSx+XD86u0ED
- TLSH T150C3148D0F692610C09994B0DDD10BA17DFE422E9B97D392B59100BAFDD2D21DA25CF9
- MD5 SHA1 SHA512 SSDEEP TLSH