Analysis
- max time kernel
62s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
22/09/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yenebirr.apk
Resource
android-x86-arm-20260721-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
yenebirr.apk
Resource
android-x64-20260721-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
yenebirr.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target yenebirr.apk
- Size 4.5MB
- Sample260922-pl8dsaec99
- SHA256 9a92020eb18896946a7bf6a73ea61e64bb1c2b07a8210b120d6aceb77a81cf30
- MD5 ac36adbcb99807062261767c8fd6a5c9
- SHA1 67fac6e23fc9b56f66d1425df967a81f86cd2394
- SHA512 8cea60ad9ff7b9ca6c8ce644f6ed6042299f22c372ae0993fefacaa80cd61cf92b1a04d833522bc5c74168dcef5f668b1faac99e7bbafb42a5e082998c467736
- SSDEEP 98304:xHgK1rNTPBEyhfkvB4/IcG+Sp4q5VGxSIoPhKIqIBIU16:B3d/jfEj+80pexeV
- TLSH T17B261242E3E59D6FCC3381365BEB473916928E42C996D3138968B21C6DBBAC54F44FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.melaku.yenebirr - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.melaku.yenebirr - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.melaku.yenebirr