Analysis
- max time kernel
149s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
22/08/2026, 00:15
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ymxk20260822044237.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ymxk20260822044237.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ymxk20260822044237.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ymxk20260822044237.apk
- Size 4.4MB
- Sample260822-akbabsdh26
- SHA256 a547fdd928fef27253f57d8de43e2859b5f358dcfae94e05c10df2f5b94318f7
- MD5 e45f0ab8e07f799f8fa4365f624227d7
- SHA1 63b42c7896fd603bd631dc0b0d8b58fc415af3cc
- SHA512 5a2a9ff3ab0ec9cd3736c1453ea0f85bcb7168ebfd392cd97db078c673a495f328cc2120aef19508eea521b46a000a539d217983a557cbc77fefff80083dbc16
- SSDEEP 98304:NfzBmmHpWZVwjyV+geP+Andwz8SZ2o947okITJrfLQMi15KoCu6YV7lp01gvZ:pdmmHpMJ+PPznd88C2onQMi1sturRp0g
- TLSH T180263343E71B965ED8F7973B0E329666053AAC67CB2780C7C690323E18776D48F15AE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener and.ytlksasx.swmdfzeeig - Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 114.114.114.114 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone and.ytlksasx.swmdfzeeig - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver and.ytlksasx.swmdfzeeig - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo and.ytlksasx.swmdfzeeig - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo and.ytlksasx.swmdfzeeig
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/and.ytlksasx.swmdfzeeig/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 2840ce6c72bba14848bb0a65544a39c52d304861c1ff1d0a6a7bdd24049509b6
- MD5 7e22e45cb0d7f6f02fc1492f19c1f01f
- SHA1 5ced301374259a1aa6a3ece0498841e269bbc86b
- SHA512 d95a266e1d58d3374454a16bdbfe539c3430641de847e81552b174b3a6546b78f4f5d0cf056db770ee4712fa04ea18d9be580202e9ac899de8d1b5ea1ed64aab
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/and.ytlksasx.swmdfzeeig/primary.prof
- Size 5KB
- SHA256 7ee29244eb8e404dba47db3bd96e7ca012425a44bb1d59f73bc326dbb6405728
- MD5 ecfa0500657f399758cdcc9f2176884e
- SHA1 c0922cf2f0ae830e50f72f651785f5f3ea0def62
- SHA512 f7fc0e0b49fb517ccef0eef2b30b38ac6378bfbcd9ad941b127213429c7bb4ad193591d42df155b5e4a2fd17cafbd62e5fc7663469dd9cd0e6a6716bb904a9c8
- SSDEEP 96:9u0t05evc9kH3PfdOfOYMxMx8kL797QozuTKJAzwIB:9u0y5evc9mfdOGYMxo/JKmoFB
- TLSH T14BC16C41BF4204A70CB234E8563C30991791E78FCEFAC06686EC4F8B5E5CAA759C5147
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/and.ytlksasx.swmdfzeeig/primary.prof
- Size 1KB
- SHA256 926fbb400e22db2787e280c5ce85ba654d37e427cc36ddcb74af4340fb855487
- MD5 17a6644969df3869862923061d8b7b6f
- SHA1 35b20180fe2f7ac2bd4b97a7d504671f63798035
- SHA512 cca3b5375f752f6a3825ddad15bd13a072558944fe67e26eafa353f317e6953293d68b24107e3abfdeecfefe638badecddee1238c580d6a66f70f382341fd988
- TLSH T1F331C9992F3E904B14245498E5E117C92DD4F0B6FB05938FDF53F578706902B5D910CE
- MD5 SHA1 SHA512 TLSH