Analysis
- max time kernel
67s - max time network
154s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
07/09/2026, 06:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xingqudao-android.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
xingqudao-android.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
xingqudao-android.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target xingqudao-android.apk
- Size 5.4MB
- Sample260907-gynadazeld
- SHA256 9160fcd248b5f8e60f605119c065c2ff04c6b090bf01377a72de23019daa3d12
- MD5 c05ff8450ef864a2ce3c8ddd477d1a5a
- SHA1 2a39050d5a6fcabef3999c452bdac25281d36888
- SHA512 8f80a338ba95ef0e06a54ad977e3444f8a191af9a2091fa896300dd01674f80c2962c7945889f7946bfa9d28cf608377b329418b3a87eed53e0e62c3917f6f35
- SSDEEP 98304:CVgs+CdoaMatj2HSggfXYDk0RNObGlDxhJ9HL90AoTwrki:CVBBopSg3Y0ibGFxhLeW
- TLSH T18B46F097F718A92FC83710F249BE563256874C168A8397436D58321C6DBB9D43F8AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.xingqudao.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xingqudao.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xingqudao.app