Analysis
- max time kernel
6s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
09/08/2026, 18:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yt2mp3_client_1.0.36_android.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target yt2mp3_client_1.0.36_android.apk
- Size 47.9MB
- Sample260809-wt3a3awwex
- SHA256 ce3fa2bba81df0269246509d9e858fa4694a374a782d45994fa106ddcf3423d8
- MD5 59015e6c82da5e9674bc6fdac7cc185b
- SHA1 e2259ddcdab53b7cbde413ae1bb2e4eb7bb6b526
- SHA512 a5b3985d905b522755b83519bd3426023c6421fb06478e54d4bbb4ecc948b54ddff2feb063a0c2ff04171048884ef569b2807b37db963d5b417499799d0785a6
- SSDEEP 393216:tf4FARAfnBcFoDIUK3d8gXthmHmpE1hlx29:hPRKnBkokUwhsmmE9
- TLSH T14DB7D107F069853AC8EBE238F76F4632B234344D85E7A55B790C52107F9B5E01BA6BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4590 de.yt2mp3.client /system_ext/framework/androidx.window.sidecar.jar 4590 de.yt2mp3.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo de.yt2mp3.client
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/de.yt2mp3.client/files/.yt2mp3_client/.last_telemetry
- Size 10B
- SHA256 c4370849ccedd87850f682645a2e2bdc76771e9f8a83989f29aa1254aeeab177
- MD5 e968af3d9c7cbb4632a776552db940e4
- SHA1 c73d6dac5c04afa18cd446804dfc69d41398d53f
- SHA512 d84a987a22b645d29a2c9acfb7e78d7a9d0087d8556d08c709b2d04dc306f26e6844d404045833132d1cc7bd47d9f2ed3facd1acf622bba10845bdc4a8fa66b5
- MD5 SHA1 SHA512
- Path /data/data/de.yt2mp3.client/files/.yt2mp3_client/device_id.txt
- Size 24B
- SHA256 fc51c74aa6c81a707a81219ea159288c1d59f33b18dc00e49fce20977d0adc44
- MD5 d565adf1be5496390c531a45cd08f4fa
- SHA1 719a06157f160e6c6ce6131e1d7f2541b7e2262e
- SHA512 15163677278430eb4bc31d78588e56d0fa589e320ff6bd4f42af550ca252703a5b7b46c7e76ba64b0367e7be44541451bf00ec9a8c5f20a170ea5a64150225e5
- MD5 SHA1 SHA512
- Path /data/data/de.yt2mp3.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 5a8fb0b76e08a86b89e6d71b141a8b4753743b0583adb530adea6a066e9e9db5
- MD5 e682b7c606d981d4663324e401b9ce66
- SHA1 fcfc2acd99228d65ee8ced6c9a9c0e061a13f07d
- SHA512 3e1f47f55bf326b81328a0332fa388e2fa77c6052c3b858e000108aa348d8c166007976beb2279dca9f6739a7219756d57a132fd086606ba6d49496cb770cee8
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/de.yt2mp3.client/primary.prof
- Size 175B
- SHA256 a64d9298c6101325e144c86db376b78ead9efc0f3dcb249e767e0011189e5748
- MD5 b2272a8f42d79375380495d6b6eb43e1
- SHA1 7515ff63540509e08dce37a478f3ba410e4665c4
- SHA512 eb461d3deaf8a2804590ec154da313143283cf06b73dbbe931ecc108295cfb113e684414a36c1a6ad9b2ffcddb6a2af19785268be7e767d17b82aff2647e8477
- TLSH T106C0C0A8CA4435E0F636002820810C5D1FC8DD00B35F6DF40E0D070338154F14D00271
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH