Analysis

  • max time kernel
    123s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    02/11/2026, 00:51

General

  • Target
    MinimalistBookkeeping-3.2.0-debug-202609070906.apk
  • Size 8.7MB
  • Sample261102-a7j6razsdw
  • SHA256 390bdc7ef5745b6ba419f4e2a40c8b96ae8e6be6674968ad1d29b0d1512a0b4b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.skyanchor.bookkeeping
    1⤵
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4259

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        bookkeeping.db-journal

        • Path /data/data/com.skyanchor.bookkeeping/databases/bookkeeping.db-journal
        • Size 512B
        • SHA256 f961078571155f0bf89290d9c8d39ab1f694e003873a196494b1bb92c041470b
        • MD5 SHA1 SHA512

        bookkeeping.db-wal

        • Path /data/data/com.skyanchor.bookkeeping/databases/bookkeeping.db-wal
        • Size 173KB
        • SHA256 9ba9ffea1dc525ec3087e01a0d520dee66c577a65b6139e429bd037856c728fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.skyanchor.bookkeeping/files/profileInstalled
        • Size 24B
        • SHA256 d7506b93c1d941a5ae8dd889b1a372a13a889b0d40d25fcf28f4c2678ac63fa4
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 8c06ca47724f54986f0c2b66bf96d4acd82d4028fa0937e9c7a1d90a2de460b5
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 d1c18fe5d577174e6d3c6612618bcbe0f5aa7c573db464ade26045d8d394cb58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-wal
        • Size 213KB
        • SHA256 b454097eb42f0c894b49cc866dd804272838deefd684685e1dd78457b30aa1f7
        • MD5 SHA1 SHA512 SSDEEP TLSH