Analysis
- max time kernel
109s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
- submitted
25/09/2026, 18:24
General
- Target yundinghuizg.apk
- Size 4.7MB
- Sample260925-w2e6haw1gs
- SHA256 8f3730f2fdf88a445ff8910966fd8099f26d0e7a6b7e2b58eca0015771222703
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 8 IoCs
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Queries information about active data network 1 TTPs 1 IoCs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
plus.H5697990B.zg1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
39285EFA.dex
39285EFA.dex
48781BFA96C701DD12BC2B4C3ACB9415
97282B278E5D51866F8E57204E4820E5
E0ABA531044C06F9BF70DF99519D9636
.DC4278477faeb9.txt
eje3cnc
AdEnable.dat