390bdc7ef5745b6ba419f4e2a40c8b96ae8e6be6674968ad1d29b0d1512a0b4b

Analysis

max time kernel
122s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/11/2026, 00:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MinimalistBookkeeping-3.2.0-debug-202609070906.apk
Size 8.7MB
Sample261102-a7j6razsdw
SHA256 390bdc7ef5745b6ba419f4e2a40c8b96ae8e6be6674968ad1d29b0d1512a0b4b
MD5 e29535d3575cc78010b2e66240411cbc
SHA1 21d068bea540cf4e841c24866f667afd5b5cf37f
SHA512 1033e196dbe7d5b5430e26130e1b07e7aa8e0a9377a2e40be1f72cad05448784cbe613d7f5dcd2c11b7f52b219610b86dbdd8fcceef38e1e45cfce4e867583dc
SSDEEP 196608:emq1cztOh/wmklZjU2Hw79VuueoLgPVYeh+c6cP:e71yZUN7FgyeVN
TLSH
T1929602BAF71CAA2FC47720768DBA7622414B4D128E4397836944730C29BB6D44F5AFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.skyanchor.bookkeeping

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.skyanchor.bookkeeping

com.skyanchor.bookkeeping
1⤵
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4800

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bookkeeping.db-journal

Path /data/data/com.skyanchor.bookkeeping/databases/bookkeeping.db-journal
Size 512B
SHA256 23bf7c88afeb96b113a4af10e348d20bb089cbbaa7eb201ad6051ce254ed95fe
MD5 155fa1a3eadd13862ab9af9571350dd3
SHA1 50803b79591fb9e3015d37aa78b27d2e0f8a5a47
SHA512 9db8362a77f3911fcdd3e4277ce29c2872c57201ea7d47a125cf26c0554e89a1af1cea1cc2a60c9e8eae035822b9a787ca345875684e19a99f02ef1ebcd38d90
MD5 SHA1 SHA512

Submit Download

bookkeeping.db-wal

Path /data/data/com.skyanchor.bookkeeping/databases/bookkeeping.db-wal
Size 173KB
SHA256 1dba80e46a612537307c380e1bb135de5318e79d913d6de2baad83296b742388
MD5 00344a75f9fcc2811f07e303725242f1
SHA1 4e4af88d04fc83aa0b4ffd1d01c97847bce503b0
SHA512 dd11d7e513fc09053416f2fc77d7561b30dc617eda0023fa7573591abdb7fde14c0c608918656665a6d988a4120b606881da5da2a6937230779386efa8950634
SSDEEP 96:t8Pebo8DyVDQMhxALob6VXb0sLFlw9Hr+10LDCbUh5moLsiaPxCjPLD2tUGDfm:We37mOCsLFuS6PCA2oLsiGsTD2tvfm
TLSH
T19104464D2F643342C4B8A071BCE1FA96293F912E87F766902D5510B39E71DBB981ACF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb

Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 a90a88a5a3c45bdcba0e98d1f761f9a05e70026468bc1c5294d8ae8373a93920
MD5 10887d3e5370ce2097f5c5a95db80ef6
SHA1 8cb27bd26e9b67eb2175bd8553b72e1fd8a50a87
SHA512 c024b9f25a83f4c682d3b34e08197a2c0cf6392a72f95846795c512b109576d1b85eeafc9666ca1edf7f327f72cc74130b4b6cef5ce01c64a3ee363fa4a001eb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 1b41f37d1067e7f3f87e65c17fd1524c6b03db4963f7c19a1ae8584a0b376d3a
MD5 56d2ffb91269ddea7b06ed7faa44e60e
SHA1 8ec7687dc357b4d9718c78d51d0d0cdc767e4aeb
SHA512 130b15eebe5c75e7bd87895d584f58a113d5213c47c95d9b1b6079f1f69fcb6f1fec27ecda770cd0e322b9514298e34539652d3001836ebb41513fb42b92a8c5
SSDEEP 6:KMU8eEb9FZde/kPlOERX4PBX4ogLugMBX4suuK+/6+4bNj5RgcugOw2:KMEWzdeWRmBEyPbP/6+6zkgOw2
TLSH
T1AC72C2549FC39A93D214437291C783420E31172E5352C7075D628972ECC3B88E552D88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.skyanchor.bookkeeping/no_backup/androidx.work.workdb-wal
Size 229KB
SHA256 97b6846a43f871392c5ba10ab612fb63d7ef00b285a2b0dd0bb39a99ff68f1dc
MD5 1e81850a3f58176eb5021cf098e9557d
SHA1 f13e26b334219095b97c34de41ada3499caa5722
SHA512 f9a4d9a6cf9333f25ac5caa93973f2d486e1ded13fad50c6d44a4be9fd7707c0c4150629481e0279498d0de4835e19e56c23996218f36f5cb3b11d0d52d5b251
SSDEEP 768:4fWz03zSTZD86yYDtY/DtY2DtYbDtYgDtY5:hSzSTZDzhY/hY2hYbhYghY5
TLSH
T18C3442CE0F179100C55CA5B4E5E20AE3693E9A2E438297C53CA29035FDF7416DA3F8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads