246abb1646b6b375a8d27053aafc9a50d95f1c3e4f7b22fd42631ca793301fe5

Analysis

max time kernel
23s
max time network
154s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
30/09/2026, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ya4r.apk
Size 348KB
Sample260930-pslhlawthy
SHA256 246abb1646b6b375a8d27053aafc9a50d95f1c3e4f7b22fd42631ca793301fe5
MD5 d75970ca59dfde4d5cf99973938be200
SHA1 39a4e676f3a787a0d71c082df7542198c10430a8
SHA512 ff9c9c0b1a688608de40b3c24819cb5063912cd8cd3dfcc345184b44f75b9cf27f6c0f1cd49893e724a6e5edb5e3aab8f0d1356af0565f7337031bf7e880733b
SSDEEP 6144:/IVLiphCewcLSMGIVLiphCewcLSMDIVLiphCewcLSMHIVLiphCewcLSM2IVLiphq:/IRivLSlIRivLSoIRivLS8IRivLSJIRT
TLSH
T1B574123EEB6808ACC5A671B5097BA10B8D91A00317BE3FD41763DEB16F591C2CDC9396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.ya4r.ya4r

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.ya4r.ya4r

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ya4r.ya4r

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ya4r.ya4r

com.ya4r.ya4r
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4236

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads