Analysis
- max time kernel
149s - max time network
155s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/08/2026, 00:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ymxk20260819044237.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ymxk20260819044237.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ymxk20260819044237.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ymxk20260819044237.apk
- Size 4.4MB
- Sample260819-ajbvgacb99
- SHA256 e57c01e942017d0898ea8a4924476c885bcb61bddcd6d3a36a1c972ed438c13f
- MD5 439dc198e91075f8110a5eeeb2c6d6fc
- SHA1 2210878d5cf6a32ab03a3dbf29b03e38b0567188
- SHA512 4034c4d986cd0f6da07e00bfa4ff6fb1a35ee10bb2d16fed424b59d441e41eda03b517bc18c292681031437e384379b319cd6e893fc1de51f36d88618c109e07
- SSDEEP 98304:s10bCgOisA5Vf3jgszYmsILk9r0jjj2qz//r6bmKZfGaQuPvJ+22:s10c4VfzfUULLjBrWqKZfGnuPvw7
- TLSH T16B26334BEB76485ED9F303381D348976103BACA3CB13D60B9A553B7924B71E80F99AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener free.tdkdmjzf.rrtfnlvkty - Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 114.114.114.114 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone free.tdkdmjzf.rrtfnlvkty - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver free.tdkdmjzf.rrtfnlvkty - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo free.tdkdmjzf.rrtfnlvkty - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo free.tdkdmjzf.rrtfnlvkty
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/free.tdkdmjzf.rrtfnlvkty/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 1410c227dd0576bc95670f13571695fe52d362e429bcce457471b029a6e7e9f7
- MD5 142453002a355555907e70174c457508
- SHA1 929a76aef5725bade249cae672f8deb07ea45fc7
- SHA512 8d86407528f519ae7244b3b74bb557d1149abe51323806f61e5c4569f434e06d8b7579abf90e48368effda0ebac8f8616a0eca03152d540c953c84f0818f8d35
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/free.tdkdmjzf.rrtfnlvkty/primary.prof
- Size 5KB
- SHA256 7ee29244eb8e404dba47db3bd96e7ca012425a44bb1d59f73bc326dbb6405728
- MD5 ecfa0500657f399758cdcc9f2176884e
- SHA1 c0922cf2f0ae830e50f72f651785f5f3ea0def62
- SHA512 f7fc0e0b49fb517ccef0eef2b30b38ac6378bfbcd9ad941b127213429c7bb4ad193591d42df155b5e4a2fd17cafbd62e5fc7663469dd9cd0e6a6716bb904a9c8
- SSDEEP 96:9u0t05evc9kH3PfdOfOYMxMx8kL797QozuTKJAzwIB:9u0y5evc9mfdOGYMxo/JKmoFB
- TLSH T14BC16C41BF4204A70CB234E8563C30991791E78FCEFAC06686EC4F8B5E5CAA759C5147
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/free.tdkdmjzf.rrtfnlvkty/primary.prof
- Size 1KB
- SHA256 51a162bf4beef817a62c580404c14b255265abd68848030db32bca9bc6114659
- MD5 6961f4afd3e60c925a04e0ed17a94141
- SHA1 3aa5efb688dab286d61a5e6eb8d26ee7b5b5a917
- SHA512 d468433c471011f1efeebbd17cac845ccfba1658d15e12e9ad79a7114068d32d4fb9cbad20457c28b20ec22af81ae60f5f55e908b9ce03e75cf0b46f94ffc090
- TLSH T195211B13F58433081838226876A3106D4343CABF48DF2F30813D474649D9C9FD3A5EE4
- MD5 SHA1 SHA512 TLSH