General
- Target owyq.yveame.ypvvitc.apk
- Size 76.6MB
- Sample260703-x7trhsbx3n
- SHA256 193c3751e87a41fb7e97e3ba6e7c6a9b84758eb728d68641fba743d4d24ea41b
- MD5 0256a9844dafff52cfd2b5202a2607e3
- SHA1 fa54ac0c6ffbf51ca75511699a7e1df6cd7ba545
- SHA512 709610f7871123706a06e25adb4ece45cfaf5c3bf9509d6e6d4fded1ca1feec13df16dd18fc47fb13caa83362f27508a1c7e26257ac28376341a2d264efcabf3
- SSDEEP 1572864:WisS5IImfJRXRrjg2lAcJ4ipfewE5VdDs5pX24aDPeK8:WHIEVjR/4ipGwE5o5UDPev
- TLSH T1BF083300EFD6786BEAF3D9352B781413190AAF56E34353874860377C89376F09989BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
owyq.yveame.ypvvitc.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
owyq.yveame.ypvvitc.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
owyq.yveame.ypvvitc.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target owyq.yveame.ypvvitc.apk
- Size 76.6MB
- SHA256 193c3751e87a41fb7e97e3ba6e7c6a9b84758eb728d68641fba743d4d24ea41b
- MD5 0256a9844dafff52cfd2b5202a2607e3
- SHA1 fa54ac0c6ffbf51ca75511699a7e1df6cd7ba545
- SHA512 709610f7871123706a06e25adb4ece45cfaf5c3bf9509d6e6d4fded1ca1feec13df16dd18fc47fb13caa83362f27508a1c7e26257ac28376341a2d264efcabf3
- SSDEEP 1572864:WisS5IImfJRXRrjg2lAcJ4ipfewE5VdDs5pX24aDPeK8:WHIEVjR/4ipGwE5o5UDPev
- TLSH T1BF083300EFD6786BEAF3D9352B781413190AAF56E34353874860377C89376F09989BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Queries the mobile country code (MCC)
-
Requests allowing to install additional applications from unknown sources.