Analysis

  • max time kernel
    123s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    02/11/2026, 00:51

General

  • Target
    MinimalistBookkeeping-3.2.0-debug-202609070906.apk
  • Size 8.7MB
  • Sample261102-a7j6razsdw
  • SHA256 390bdc7ef5745b6ba419f4e2a40c8b96ae8e6be6674968ad1d29b0d1512a0b4b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.skyanchor.bookkeeping
    1⤵
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:5039

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        bookkeeping.db-journal

        • Path /data/data/com.skyanchor.bookkeeping/databases/bookkeeping.db-journal
        • Size 512B
        • SHA256 e6c5c26ac47a87d18eec486dbf3c717e06ab9a4a86a743358a2a2cf76deda153
        • MD5 SHA1 SHA512

        bookkeeping.db-wal

        • Path /data/data/com.skyanchor.bookkeeping/databases/bookkeeping.db-wal
        • Size 173KB
        • SHA256 75e2e00dfc3d4012e38e138bec304a29622f98edbe9bbb40320b3e2830426d01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.skyanchor.bookkeeping/files/profileInstalled
        • Size 24B
        • SHA256 c8cdc36da9180024902a1011e2ed346fe7dd5fe4b1bef9b6383728facca1a6b5
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 8d983e8fee00dc91b93ad9e445109d5bc82b160536bb9ef6b44304b4510fd9b3
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-wal
        • Size 213KB
        • SHA256 467ced6dc44a028e39a468c6a7370a2eb320c4a373ff19fe2df9c54b55cfbbd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 c66be0dc45f9d2b1576afe02d71a8636863728e19606710145f33ee8395e4a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH