Analysis
- max time kernel
46s - max time network
155s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
07/08/2026, 00:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ymxk120260804133700.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ymxk120260804133700.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ymxk120260804133700.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ymxk120260804133700.apk
- Size 6.5MB
- Sample260807-akyevsxtbt
- SHA256 57fd1b1597a6252c933f562b6dee0b9c2591e930257bdba2bc21d8e7fb25851a
- MD5 133987d9247b769a896e491a3687993c
- SHA1 6bdb868d92fa4c971729530d4a4b1ec9c97f0c6f
- SHA512 9feb918bd9277cb7dfa07015aa806f0c12600830ccb0cf04396d4f4931829f7563356297cfc8d9bc9da3546cced72e61bc79f72ae40e281655f45d5b131c37ed
- SSDEEP 196608:1AZa+VHmL4rTmPGvTbYYEIbodrlhf+37+0qnW:f0Hy4PmPITbYYEqolhf+605
- TLSH T1DD6633A6E7260C6DC8F747350874663948B7F817CB7783A3E57420BA28BB2D11F85AD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.xldyzosk.cdq - Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 114.114.114.114 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xldyzosk.cdq - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xldyzosk.cdq
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xldyzosk.cdq/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 bdaf8c13a009f7b0fca73fa150476ea9b0c7b42ea77d99e02fe89691911a61b1
- MD5 82aa2b2cca16c961e5b8c9f3d5ba3072
- SHA1 4d6f07492fe0aa076dff0c56c408d945bfa29482
- SHA512 13ca6e4547bba2092becad751eafad09ed16774e054e502864e344e6559bd7b23b1655d413c6395e3b5fd62540e57e3a70de25be260392718e2bc2ba2c3c4880
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.xldyzosk.cdq/primary.prof
- Size 5KB
- SHA256 d833438eb962dd96951f61b319acad0a4dcbc0dcbe04784a91cf982dba6fbe23
- MD5 b713d022715a191313e9259b7ec61440
- SHA1 8a2251d36577e5b7b6e21a6d5c30098fe7e40c35
- SHA512 bc97bf8fd6ef3c4e2ea7047615ace363c507f261911c31ac42b61320551cf929fea255f0d71d186bcefaa9b445d379612d6a3240aea355a634c0a7c4eb40c001
- SSDEEP 96:jp5hoJfcIWRbW9qkyQjwhQoUZ4KmVavj5pu:jz0kIUq9Nj24K8La
- TLSH T1EFC13928BF63191F3ABB395D8C4DB1826616BBC6ECEDC008589CCA879A0AD7714D2117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.xldyzosk.cdq/primary.prof
- Size 1KB
- SHA256 9ba6847c3a9ecdb43c80dae8f1bff8b7f1188f0c9ea2ea83fa0cfd599ac3de62
- MD5 443225422f3eb1651d7a52d4f453177c
- SHA1 500ee72e7f07ca78dca01b8d50d546982b2f4b2a
- SHA512 3e4f12c28a18358cf39db2739bc669e0d1e4c9d7f7b34d9733452461c3bfb1108a8eaab8204d648a7014d8b2d1b31f38537bd267a53ca648414e4af9777ca81e
- TLSH T14231E9BE2F69F808B45906BD72F05512FCECB1654CD212FB01AA475C1153AC7BD09B8D
- MD5 SHA1 SHA512 TLSH