e0e33ad23639a0743bc966d27ec4778503258e5bdce01cc4cb9def3d8cdff5f9

Analysis

max time kernel
16s
max time network
154s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
02/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
uu01_MOAPK_20260802_102001.apk
Size 12.8MB
Sample260802-plnpdaan71
SHA256 e0e33ad23639a0743bc966d27ec4778503258e5bdce01cc4cb9def3d8cdff5f9
MD5 c2f1cacf7baee72bee58807dadb2fbc2
SHA1 fb2cad08422a4c6d6c0956f9cc9c36430b2c4324
SHA512 e0b826356a3f38b31b4948bfd1caa75ef2a7eeb998f245ae9b914ae6ec295b9508bb14e80024b1d8ff5621608e16df1e13c07db32ab015cdb28c7f45023e91d3
SSDEEP 393216:uZQ/jzXiBvQNYG4t4HeEUQOKe8th2IjbVPcS1c/YA8TECLT:uMAQNQuLdeWTbfdT
TLSH
T18CD633D3E72CB4B6E972A5336237078771260DE44183F69B2904B53C1DBBE48C659FA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4084	ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou
/system_ext/framework/androidx.window.extensions.jar	4084	ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou
/system_ext/framework/androidx.window.sidecar.jar	4084	ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou
/system_ext/framework/androidx.window.sidecar.jar	4084	ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou

ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou
1⤵
- Loads dropped Dex/Jar
- Checks CPU information
PID:4084

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

id_store.txt

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/id_store.txt
Size 16B
SHA256 05fbe795bb18d9a1cabfb6df7a30b6e28fb7b11b463ca5d71e7e1e39c1571f74
MD5 6ab8592610c3aa1e1ff12a5d5e78ab0a
SHA1 e1da19509b8260d1dbef7abe4c67e30e68ae25c4
SHA512 80fe91ead806c4b93572f7c720ddf89a92c855180128cd9f720975dd515b5fbd212dc04c0612f680d4411ad7a1538a59cf8963748d70249afb2ed403cfb88301
MD5 SHA1 SHA512

Submit Download

libCachedImageData.db

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db
Size 16KB
SHA256 f1e0ccd0f99e2ea9eeee9e0207e6d6cc2f77607cf276452a90eb1ff84b5acbb3
MD5 0560ba535c647eabe956bc5a3ab5af8c
SHA1 1d2e4cbd9ae2da4d5cb673f3186a35d099a52cfa
SHA512 97f82b832935323220a7c87f4074e5dc4b47a6497e302411ba9efff5d65075f8885e1017070956d68b0d2f8cf72713501d498c668a04ca9d2e2b322bb5747b47
SSDEEP 96:pgMk7O9tDyaygg49D9wz8z3MhMJub5Q55c2colydyq8qw8GR:2laZ+SUpCR
TLSH
T19B72FDF715E43CE5DAAC4577391998A1CC03819C4BC89270F2D867B4A3039AAB9E44BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libCachedImageData.db-journal

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db-journal
Size 8KB
SHA256 ee4e258330f472de06e3200fed264b48bb6d43c29029fc69deb8c21bf87d0172
MD5 87e4ba88bd2427a2cc2c8b6754f2e4de
SHA1 e51403e506a92de14620b6dfe2ccbacb924c6201
SHA512 a9a8c17257fda815b57064ccfda00e8905cd581faba363efb60d8653026500a8a5c8146beb72ec19b1f08a5c24e2bceb06debf16ce7f84efdecc06ee17ef6276
SSDEEP 6:7+/l9W+Wg9bNFlqalu+Oqoud2mLupWZXqDUTTihJ956LK5uOXFLERX4PBX4ogLu+:7+t4qLpu+Oqo+ypWsFlWKzVoRmBEyPba
TLSH
T1D5025C4F97006642D6098B71049452504878130F4AD4FD9775BC58B07F4BD9DE0B1D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libCachedImageData.db-journal

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db-journal
Size 8KB
SHA256 cd871ac43121d2c09bb1a1fa43beecddf8e63411fa2aac0825a239a97ac0309a
MD5 3fca61be2b9266c5eb836ee7a92350c4
SHA1 57a25bacaab21e01c4dd2d54300eae37921397eb
SHA512 24d3224560e0eef2a5136dc52b7c061cb8bb6eb46f1e79151886853b9b2a4dcc1387d77bf7d0927bf761dcd301f8f417bdf08f808d180d5c7c7e6e35bdbc55c0
SSDEEP 12:7+tW2vlMbXXp3O5qXMbXXp3O5eqcqL8uZOqo+ypWsFlWKzVoRmBEyPbO9:7+t38GqcqLXZOqjubGSO9
TLSH
T15B02CB5F9B007581DB288A72409995708C29021E4AA1E1A2F6EC06B87F4BDADB0B9C5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libCachedImageData.db-journal

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db-journal
Size 8KB
SHA256 c98198ab5663892b58ebba1f335a44be298d9943563dc14a759b779d03101462
MD5 0dc942c26f4ddbbb27c664db73bdd863
SHA1 26661ac4d7778e9358e0dc1fd42dad2f802e5a4a
SHA512 effa0e76787dc675de20553988e42df0fb901325e35e994ee411e057b136c38395a0d17b8f454d92b47aa672e8db7aa22d7ce91dd6eaddca34ce729e4e44597d
SSDEEP 96:7XO9tDyaygg49D9wz8z3MhMJub5Q55c2colydyq8qw8GrVDV0:7dlaZ+SUpCr0
TLSH
T13B0200B715E53CF5DAAC8477251D98E0CC03819C4BC89270F6D867F4A30396AB5E44BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libCachedImageData.db-journal

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db-journal
Size 512B
SHA256 344f76abcf66c459d792eaa92d8af66ace7de8da11b7768c3058f9a6979043d0
MD5 813b25c7d5d2608f087357fc56f3d652
SHA1 99f8913465c20992f297b1b0691cdfd364f7bcc4
SHA512 f27320ee45d75c824b37372f091cfc66493e132d9b7d00b682f415f68477ef9854054dd2be28df2704115ded7184fe5b7e4a8f87834ce5d5f726937aa2846f14
MD5 SHA1 SHA512

Submit Download

libCachedImageData.db-journal

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db-journal
Size 8KB
SHA256 be61d7e98b39c86f5dc9380b59f06f3c25bb7456a878e3f0805432845801196b
MD5 c988158f51013c18fb285043829bbad9
SHA1 7c44c1bb7360e39635a7fa1680dc192db5232ae4
SHA512 5d7ce8c082da214847ea7d306b9430b77219fba58d25143e30db5a72e0deaffb73c6a99f27304d09e1dfc9d19985991fb9c898bff679d306877571841ad60d60
SSDEEP 6:7+/l9In13g9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK8xr:7+tAqLiuWd7RmBEyPbjr
TLSH
T1A102C09C63C32813D92D977790E883800D00E7188372CB47095108943D036CCE4B4F68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libCachedImageData.db-journal

Path /data/data/ylytbkejepzy.chvgwrlpyonm.sazlgiyawuou/files/libCachedImageData.db-journal
Size 8KB
SHA256 b518f576ce0e6259c4091252f454b70cd77243b99a7fcb9edb4785f0eecba479
MD5 4833a91abe0d9a3a2f20b8cb0e687830
SHA1 866f8397fd28e49a9240bc6074c72ecbae1e263a
SHA512 d908c0f56beafb1472a7fb3ebf10ef1d62ea17aa8fe725f83d9684db78a0a38737a54ad14ce19fdf7359d053a07d6c4c228311114cb6e74c05c7577c5d8fec36
SSDEEP 6:7+/l9J0FPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK2kl//Z:7+t76qLJdKBRmBEyPbRklXZ
TLSH
T19E02C08C73400A03C01D5B7790DC83409E14AB14C333CB3B476028957C037CCE890D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

socket:[59041]

Path socket:[59041]
Size 46B
SHA256 86710e25e09a73ae56b1679db20233ab7f62f0ea01015af62c2e1faa620e4e04
MD5 4fd977ac4abb56245c927abb45fb8d21
SHA1 6d1a78f7730040c2e29bd2b0c081622188bc5713
SHA512 c2add88ff3c0aba01b0f88244d97a1e2d1357fec53d04e96ddb3c063e36b50e5075bb175e0724f3ad572e54b9f1adfdbfab2de640c4abc1d6e5ebde4f7e0b718
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads