Resubmissions

12/08/2026, 16:23

260812-twamqadg497

12/08/2026, 16:10

260812-tmcqqabm417

Analysis

  • max time kernel
    22s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    12/08/2026, 16:10

General

  • Target
    app.apk
  • Size 6.2MB
  • Sample260812-tmcqqabm41
  • SHA256 a09845937bfdbf096e63a9831451352b12fc13771da56e4d701d0c3a2e1074ac
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.yewendr
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5064

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.yewendr/files/INSTALLATION
        • Size 36B
        • SHA256 34b83bdaf3c78452c1e1bfd8d1ea619d5aebcb9d4b812cb7e56b29efd8a136bb
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.yewendr/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 6d31ab6d913822dcd5833cac0a6e7912c1cd4abd3e85d97caeceebfa338edad0
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.yewendr/files/profileInstalled
        • Size 24B
        • SHA256 d0bc45bed835369ff3c7194836d20aa5f329194fd73b845dba0d4fa834bc8220
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.yewendr/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 17fb498e4a611462a410bdc911ad2b3a864d5e7d28b909e31e4008c55db29577
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.yewendr/primary.prof
        • Size 2KB
        • SHA256 32a204e9c40be301c51703fc779fbf8e82822e7257762dd57d52511db2f68765
        • MD5 SHA1 SHA512 TLSH