General
- Target yellow-craft-5-1.zip.apk
- Size 28.1MB
- Sample260828-zykhlatckd
- SHA256 0d4cb429d3d41509b0775accd967de076b2209aec0c3e971eb70d88088a2edff
- MD5 9632b65d12bb8a98635619f4f309f371
- SHA1 2e71342145244aef765c79461db9f83847054b67
- SHA512 ea44b497e710b02e2d3dd8ef7ae32ba5b475bf542159bae7929fd99b765d446e636e238ec9c2447e626e7eefe382df8f3746ab5b372db322d91b4db5c0fd24d9
- SSDEEP 786432:qUm7ruG89FLUBdP6wc9hOWqObeLazUPtRuVESE1unaQAWJzENj5yXBMygw:MuGULYxCmWqOb7zOtuOZPNFyyygw
- TLSH T14A5733AD0E88F3E9F361D023CB3C5D4D6D40A1152983DCFFE5DBF92852B664CA146A98
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
yellow-craft-5-1.zip.apk
Resource
android-x64-arm64-20260325-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
yellow-craft-5-1.zip.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target yellow-craft-5-1.zip.apk
- Size 28.1MB
- SHA256 0d4cb429d3d41509b0775accd967de076b2209aec0c3e971eb70d88088a2edff
- MD5 9632b65d12bb8a98635619f4f309f371
- SHA1 2e71342145244aef765c79461db9f83847054b67
- SHA512 ea44b497e710b02e2d3dd8ef7ae32ba5b475bf542159bae7929fd99b765d446e636e238ec9c2447e626e7eefe382df8f3746ab5b372db322d91b4db5c0fd24d9
- SSDEEP 786432:qUm7ruG89FLUBdP6wc9hOWqObeLazUPtRuVESE1unaQAWJzENj5yXBMygw:MuGULYxCmWqOb7zOtuOZPNFyyygw
- TLSH T14A5733AD0E88F3E9F361D023CB3C5D4D6D40A1152983DCFFE5DBF92852B664CA146A98
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger