Analysis
- max time kernel
148s - max time network
157s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/08/2026, 00:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ymxk120260804133700.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ymxk120260804133700.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ymxk120260804133700.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ymxk120260804133700.apk
- Size 6.5MB
- Sample260807-akyevsxtbt
- SHA256 57fd1b1597a6252c933f562b6dee0b9c2591e930257bdba2bc21d8e7fb25851a
- MD5 133987d9247b769a896e491a3687993c
- SHA1 6bdb868d92fa4c971729530d4a4b1ec9c97f0c6f
- SHA512 9feb918bd9277cb7dfa07015aa806f0c12600830ccb0cf04396d4f4931829f7563356297cfc8d9bc9da3546cced72e61bc79f72ae40e281655f45d5b131c37ed
- SSDEEP 196608:1AZa+VHmL4rTmPGvTbYYEIbodrlhf+37+0qnW:f0Hy4PmPITbYYEqolhf+605
- TLSH T1DD6633A6E7260C6DC8F747350874663948B7F817CB7783A3E57420BA28BB2D11F85AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.xldyzosk.cdq - Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 114.114.114.114 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.xldyzosk.cdq - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xldyzosk.cdq - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xldyzosk.cdq - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xldyzosk.cdq
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xldyzosk.cdq/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 afdc512dfc9f02f89fd06f0f7e314d55bb68d20a2f3a609c73079123f7c571f9
- MD5 9558956bf9152614ff3026a391533ecc
- SHA1 73b047be563dbefd50387302ce82609ab02b5cad
- SHA512 a526bf072f204be33e0bbf51a3fa9746b7df78745d62212296bbe32a5b5b5f18616922e5d68183bd337e9c27f3913b44c484e097b2e9e08024c2d3efa625c329
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.xldyzosk.cdq/primary.prof
- Size 5KB
- SHA256 d833438eb962dd96951f61b319acad0a4dcbc0dcbe04784a91cf982dba6fbe23
- MD5 b713d022715a191313e9259b7ec61440
- SHA1 8a2251d36577e5b7b6e21a6d5c30098fe7e40c35
- SHA512 bc97bf8fd6ef3c4e2ea7047615ace363c507f261911c31ac42b61320551cf929fea255f0d71d186bcefaa9b445d379612d6a3240aea355a634c0a7c4eb40c001
- SSDEEP 96:jp5hoJfcIWRbW9qkyQjwhQoUZ4KmVavj5pu:jz0kIUq9Nj24K8La
- TLSH T1EFC13928BF63191F3ABB395D8C4DB1826616BBC6ECEDC008589CCA879A0AD7714D2117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.xldyzosk.cdq/primary.prof
- Size 1KB
- SHA256 0d1323a61a0d5e197b9d7c18bc14a93d563f2b9bc3d22ef2ac9c6604201d1036
- MD5 484c8f333d462a13cf96e844edd544f2
- SHA1 dea3dae982be1af8edf1c77bfb3ee98f6569b168
- SHA512 72f937bc3c99cde84a891f65c7f1b13a68a94c2a0c0009128e7a6f954d691617ce2ab6f8b0512bbd9152ff21e6de68ac9e21f7308aecda621a2bcce0b1293f4b
- TLSH T1DE21B945D9C869AE823E1DB080C5731B1EE7C38CF7D61778855E890333290576AAD05B
- MD5 SHA1 SHA512 TLSH