Analysis
- max time kernel
148s - max time network
154s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
07/08/2026, 00:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ymxk120260804133700.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ymxk120260804133700.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ymxk120260804133700.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ymxk120260804133700.apk
- Size 6.5MB
- Sample260807-akyevsxtbt
- SHA256 57fd1b1597a6252c933f562b6dee0b9c2591e930257bdba2bc21d8e7fb25851a
- MD5 133987d9247b769a896e491a3687993c
- SHA1 6bdb868d92fa4c971729530d4a4b1ec9c97f0c6f
- SHA512 9feb918bd9277cb7dfa07015aa806f0c12600830ccb0cf04396d4f4931829f7563356297cfc8d9bc9da3546cced72e61bc79f72ae40e281655f45d5b131c37ed
- SSDEEP 196608:1AZa+VHmL4rTmPGvTbYYEIbodrlhf+37+0qnW:f0Hy4PmPITbYYEqolhf+605
- TLSH T1DD6633A6E7260C6DC8F747350874663948B7F817CB7783A3E57420BA28BB2D11F85AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 114.114.114.114 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.xldyzosk.cdq - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xldyzosk.cdq - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xldyzosk.cdq - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xldyzosk.cdq
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xldyzosk.cdq/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 08b7333b3f7fb68bba12234a6c1a1da69a9fbdf46961394b4aa2e30dfa4abce8
- MD5 8660d5084040c5928834dc796936f8a6
- SHA1 e835a8a21e80ab110d744325724350bd0a504d82
- SHA512 67c90b9509769f526a2f0b3698f88fd543694ce4bfdf0eff99b12bd7ef66336e695b4e8584b9bad66818bab3f0ee51ad4c572fb7039a1b2654bdd305be643f49
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.xldyzosk.cdq/primary.prof
- Size 5KB
- SHA256 d833438eb962dd96951f61b319acad0a4dcbc0dcbe04784a91cf982dba6fbe23
- MD5 b713d022715a191313e9259b7ec61440
- SHA1 8a2251d36577e5b7b6e21a6d5c30098fe7e40c35
- SHA512 bc97bf8fd6ef3c4e2ea7047615ace363c507f261911c31ac42b61320551cf929fea255f0d71d186bcefaa9b445d379612d6a3240aea355a634c0a7c4eb40c001
- SSDEEP 96:jp5hoJfcIWRbW9qkyQjwhQoUZ4KmVavj5pu:jz0kIUq9Nj24K8La
- TLSH T1EFC13928BF63191F3ABB395D8C4DB1826616BBC6ECEDC008589CCA879A0AD7714D2117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.xldyzosk.cdq/primary.prof
- Size 1KB
- SHA256 3d4cd914a1e7b87fc00f9033a50f75f5ba96f42537207aa94003793364161404
- MD5 dc341d95abb5f5391cf2bd9384ac69a9
- SHA1 093b7bcd9ac4cdecb3ca5f3915197c1fc4a74425
- SHA512 1f905d6baad719e9c4ef1acbbbdedd98323b85f5774eac8d1e5f37a40416e6ebf5c6337fcdaadaf391740103dbfe192bb3a16e529a15009db16398777ed220a1
- TLSH T11131DAB1CF7A42D56516205E32B292F5339E42999AC9B434BB2DB7190CCD282C44EBDA
- MD5 SHA1 SHA512 TLSH