9ff12d633a1d5e11f7135b0df08088ec9f2ea163436a2bc0d41a95d21531e933

Analysis

max time kernel
4s
max time network
178s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
14/10/2026, 03:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Yes-Your-Grace-v1-0-99-b927-mod.apk
Size 834.0MB
Sample261014-d4drcae12x
SHA256 9ff12d633a1d5e11f7135b0df08088ec9f2ea163436a2bc0d41a95d21531e933
MD5 c5afa4971de2dafbf78babb01d6aae34
SHA1 345ec1b5fe760e8fa6220895a388c0fc362cf449
SHA512 a2306643de64d9745f5c25365c777564a7e9672eb434382be228999e817b42735788a05ab0df6e574c6cf97716fa9e99f200f8d3db88c6fee1d4532b8318b566
SSDEEP 12582912:NDJ0zfXvzktDOGGYFZZylvZKLdZgCD2YsERaUpwjk:NNGPv4gGGQZZy0Zg7ORbwo
TLSH
T1DD998B43F645CC62FAC06C76C97AC9FA0AB67DFACAE29263B4947C6C787D1033146905
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.noodlecake.yesyourgrace/files/PDALIFE.conf	4210	com.noodlecake.yesyourgrace

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.noodlecake.yesyourgrace

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.noodlecake.yesyourgrace

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.noodlecake.yesyourgrace

com.noodlecake.yesyourgrace
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4210

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

PDALIFE.vdex

Path /data/data/com.noodlecake.yesyourgrace/files/oat/x86_64/PDALIFE.vdex
Size 408B
SHA256 f198b628cf385d1fdfd5913f16622949ee54d6f4d6ab0b28b9f62c172e040beb
MD5 b051317ff235604120a4b90c1555b7fd
SHA1 11671a84ea88cc54ef189a377b1929f103144417
SHA512 c5fbbe3f288c7ff426a19f71ace7a367a5e0b44834074d48c0ebbc5326f14ea98e98f8fb61ff8820d75ad6ee5b1831e49ce48fe7b513b4e3e24e13ab7497f81b
TLSH
T1A6E0D85FD3786CB1E6F7E03450290102525260348521959A1F01BAA869E36F11E50958
MD5 SHA1 SHA512 TLSH

Submit Download

PDALIFE.conf

Path /data/user/0/com.noodlecake.yesyourgrace/files/PDALIFE.conf
Size 101KB
SHA256 a813bffdcff889a744ce5d59b3ce3c3f21480330bb9cb905d5c33e49e9089b19
MD5 a4b63eb04e479d9d25c1f53fec66384b
SHA1 e18b9a71007c49e24a4ea1093e685a8facb5bb28
SHA512 1d4f44a375a76cd2f7f6bcfa9e0c5eaca0a71e22bcb2ca8c9744056e2895093154fe0910540ea003cda62ac7fa6425685c7a1022f3d57842fc93e95237629832
SSDEEP 1536:Cu6dACIJEb3HlDEZB0yW5ODTU5wsOzkTfFRF6edLoIN2AE:oiCEWsB+sHywkzFaAFE
TLSH
T112A37A10E91A3BFADE70CE749D6A86436D2C81D251069ACECD1EF365BACF1F1444C4B0
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads