Analysis
- max time kernel
25s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260721-en - resource tags
arch:armarch:x86image:android-x86-arm-20260721-enlocale:en-usos:android-9-x86system - submitted
22/09/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yenebirr.apk
Resource
android-x86-arm-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
yenebirr.apk
Resource
android-x64-20260721-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
yenebirr.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target yenebirr.apk
- Size 4.5MB
- Sample260922-pl8dsaec99
- SHA256 9a92020eb18896946a7bf6a73ea61e64bb1c2b07a8210b120d6aceb77a81cf30
- MD5 ac36adbcb99807062261767c8fd6a5c9
- SHA1 67fac6e23fc9b56f66d1425df967a81f86cd2394
- SHA512 8cea60ad9ff7b9ca6c8ce644f6ed6042299f22c372ae0993fefacaa80cd61cf92b1a04d833522bc5c74168dcef5f668b1faac99e7bbafb42a5e082998c467736
- SSDEEP 98304:xHgK1rNTPBEyhfkvB4/IcG+Sp4q5VGxSIoPhKIqIBIU16:B3d/jfEj+80pexeV
- TLSH T17B261242E3E59D6FCC3381365BEB473916928E42C996D3138968B21C6DBBAC54F44FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.melaku.yenebirr - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.melaku.yenebirr - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.melaku.yenebirr - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.melaku.yenebirr
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.melaku.yenebirr/files/profileInstalled
- Size 24B
- SHA256 948b73467fe24d564369a84e4d7f1187a4d43d3ff8096b9acfd6f65be146d64c
- MD5 e978f81ba3c457d4ea422f923ba8caed
- SHA1 b6ba648435d60c63accb91c94a22ecf8360f08f0
- SHA512 8eea0ac643fb16568c1f553f84d73d4fb1e9566bd5acd6f6cf442d3fbb26a0b25eac3ed81d674d1a28a2646dda0096a5be1b01546fa5ea5d10ec7c2e4958eeb8
- MD5 SHA1 SHA512