c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe

Analysis

max time kernel
147s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/09/2026, 06:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe.apk
Size 23.9MB
Sample260910-gzyshassct
SHA256 c90b9a0e3b9cfd75d9b4679e7ff32f6fb343269be4f760ef62b1e0ebc2bc47fe
MD5 1bb5f58e19c303d74d0f39bc6f662634
SHA1 c36905bfd6f3cd720b5ab4310f38064843724a00
SHA512 35d689a6251a528e1d93c12b8b0d0ac69e7a111be4e851608c75cb0924358b1b261f450280b828d0d9b7c9d985ea12863cf08ab7ebc84f51a773633aaa58c5c2
SSDEEP 393216:vM7cZ8CtxjjXNy2nxWdelBv9f0lP393FQBEWw2n+yuAOdG:UoZBj9yaWd89UPtFQBPln9uDdG
TLSH
T12647DF1EDCC4DE31E9A2077705058BB2E2771C5ACBEA87422343FE3E297650767A1D86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.yknsskojy.evwkqmeuj/app_dex/classes.dex	4840	com.yknsskojy.evwkqmeuj
/data/user/0/com.yknsskojy.evwkqmeuj/app_dex/classes.dex	4840	com.yknsskojy.evwkqmeuj

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.yknsskojy.evwkqmeuj

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.yknsskojy.evwkqmeuj

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.yknsskojy.evwkqmeuj

com.yknsskojy.evwkqmeuj
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4840

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.yknsskojy.evwkqmeuj/app_dex/classes.dex
Size 2.0MB
SHA256 6c2c7b863fa5e4fcecc82fe6175cebea3c3d676862820c9021bd2c0e506a9da0
MD5 06dc873e0c7fae348480de34898d7650
SHA1 141652026cce340b4caef47f2ae51da37da84486
SHA512 e8ce680b8ab0156d46e3ca267bc2c10e89bd4de25fb52b375a056da9c11aaad4da616cc15f32fcca4459392fe395548e07fb3f3f523b55b6b073c3eafba046c5
SSDEEP 49152:hObBRWVGCvXhtV088XClOTI9ge+bo5Z/rd:OOxtV088XClOTI9ge+ba1d
TLSH
T12CA54907E552CF63C87DE33DA8E6431073366580BB838B1B245AE5F0ED472C56B996CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.dex

Path /data/data/com.yknsskojy.evwkqmeuj/cache/classes.dex
Size 1001KB
SHA256 2c703a11989ee1d0e2cb9237d38a96c4b5f5c7d20710d0365a3fe3e8dd385b30
MD5 7cce539a306c6a5f8478ea91948573d7
SHA1 6a244f69439ee3de435a29394c92d0344419778d
SHA512 cac8ced18d3d240251ec03535b2c8c3d7300a1dc3449f4e403984eb93aa23ca51f7b611dc7e350c26a45880a164a406168555ba61940b4db6e23bb4f5db46b63
SSDEEP 24576:eqzo+Jeewo0sMBJS68XqDBfcTiSmETwfOCQIBeJJu8XR51:5zoChFMnSOf37fZBmQ8X31
TLSH
T1962533BE65F57541B9329C22D58E191F4D305ABC6F0FB9134F88962C08CECE0D69ACE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.zip

Path /data/data/com.yknsskojy.evwkqmeuj/cache/classes.zip
Size 1001KB
SHA256 b72f7f868af354d4640df1383920a6949c04a0c9b26a080b54d7bcc1ba3a29df
MD5 65f322dbaff809424e3c05489690ebb5
SHA1 8528c42c6e52901e9c68ca2fa58805d10b7e4383
SHA512 0809293d776a3c0895985158f828e4cd4bddc1bdb86cce6f79b5a9c0e920881f9c1f55570e1e7d8bfa77c8cea1787405f6a81410580aafbf1e1430c8ebeb8090
SSDEEP 24576:oqfo+1C66omQOzJIWyXeDfdKPi42ENotKCuC/CZzOCDR7j:jfoS5xOdIcdN1tp/YqCDlj
TLSH
T1712533BE65F57541B9329C22D58E191F4D305ABC6F0BBD134F88962C08CECE0D69ACE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads