Analysis
- max time kernel
7s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
09/08/2026, 17:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yt2mp3_client_1.0.36_android.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target yt2mp3_client_1.0.36_android.apk
- Size 47.9MB
- Sample260809-vsvddsaq6v
- SHA256 ce3fa2bba81df0269246509d9e858fa4694a374a782d45994fa106ddcf3423d8
- MD5 59015e6c82da5e9674bc6fdac7cc185b
- SHA1 e2259ddcdab53b7cbde413ae1bb2e4eb7bb6b526
- SHA512 a5b3985d905b522755b83519bd3426023c6421fb06478e54d4bbb4ecc948b54ddff2feb063a0c2ff04171048884ef569b2807b37db963d5b417499799d0785a6
- SSDEEP 393216:tf4FARAfnBcFoDIUK3d8gXthmHmpE1hlx29:hPRKnBkokUwhsmmE9
- TLSH T14DB7D107F069853AC8EBE238F76F4632B234344D85E7A55B790C52107F9B5E01BA6BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4806 de.yt2mp3.client /system_ext/framework/androidx.window.sidecar.jar 4806 de.yt2mp3.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo de.yt2mp3.client
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/de.yt2mp3.client/files/.yt2mp3_client/.last_telemetry
- Size 10B
- SHA256 c4370849ccedd87850f682645a2e2bdc76771e9f8a83989f29aa1254aeeab177
- MD5 e968af3d9c7cbb4632a776552db940e4
- SHA1 c73d6dac5c04afa18cd446804dfc69d41398d53f
- SHA512 d84a987a22b645d29a2c9acfb7e78d7a9d0087d8556d08c709b2d04dc306f26e6844d404045833132d1cc7bd47d9f2ed3facd1acf622bba10845bdc4a8fa66b5
- MD5 SHA1 SHA512
- Path /data/data/de.yt2mp3.client/files/.yt2mp3_client/device_id.txt
- Size 24B
- SHA256 d31872636ff9f151e18eafe9b48a81e63fa36c7de4b08b9a0e7fa36b8fe05884
- MD5 013f8fdbc745713779781272f6e22932
- SHA1 ad1a8316dafdecbe91bd713029b5487a16313dc2
- SHA512 cc02aefa8d5f66c1c57520e19bff845128cd6aed90cd6070da6043e52e853480c8319ea2bb5bf9de768a869375a614e4a69694a6ed553c4de5a516b8b6fba6df
- MD5 SHA1 SHA512
- Path /data/data/de.yt2mp3.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 5eac62f825ded7e07b9db1e3248f18fe430118ac343710e6bfb76d84fafe33d9
- MD5 c8d71db78c110e4ebf9c885bfe6f2a3c
- SHA1 4e8041e7333891382b670b8a77abf9d1b03db754
- SHA512 031d56e895c42b761a5bd0d4ae000e49bdf41cbe6cb0e7d1fd27900604f4f192adec6b75213996c965c0ab692c324ebfe47448e6c574ff6686c994ed5c1be310
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/de.yt2mp3.client/primary.prof
- Size 175B
- SHA256 a64d9298c6101325e144c86db376b78ead9efc0f3dcb249e767e0011189e5748
- MD5 b2272a8f42d79375380495d6b6eb43e1
- SHA1 7515ff63540509e08dce37a478f3ba410e4665c4
- SHA512 eb461d3deaf8a2804590ec154da313143283cf06b73dbbe931ecc108295cfb113e684414a36c1a6ad9b2ffcddb6a2af19785268be7e767d17b82aff2647e8477
- TLSH T106C0C0A8CA4435E0F636002820810C5D1FC8DD00B35F6DF40E0D070338154F14D00271
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH