Analysis
- max time kernel
40s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/10/2026, 12:09
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
yinxi-beta.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
yinxi-beta.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
yinxi-beta.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target yinxi-beta.apk
- Size 9.0MB
- Sample261027-pbnlmade45
- SHA256 5c8c939d95336d0cd6153f673a20f191498b6680be5bc86aa482f4f8aeb2bf22
- MD5 19cc92283b1512dafd2a1e0ded2c021b
- SHA1 203ee35a0e87c87d6629dce8361c7608e61e2402
- SHA512 8be75bfc5c5ad850b44c9170d3f9f7095aca0203457499b17194b647b2e942d491152d0c8c2a7a1e9c9f8eadf57358e1173dedfd363465f1e8f1c3426de82e1d
- SSDEEP 196608:DmEGvhRsf5VCxObM9TcflbjA1ziJQtFbPw41PKjdMuGE6:K5vhRSaAbM9TKlbjA1z3bPaVG5
- TLSH T1219623C2F3E55E6FCD7746360B9B1370276AAE128993C3479A54762C2C372C85E89BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.yinxi.practice.beta - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.yinxi.practice.beta - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.yinxi.practice.beta - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.yinxi.practice.beta - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.yinxi.practice.beta
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.yinxi.practice.beta/files/profileInstalled
- Size 24B
- SHA256 7298fc8d2fea4baf57bab2a98b2d52edd23b71619fdbabb39050c5a5e2ae6dc6
- MD5 148b74319f61083f2150529523b88ab7
- SHA1 9055d56ca368ba8a436d0c73f274e7ec06f2fa7d
- SHA512 64896ce36d6d5f19acc806779ce741728ec1a04d2ba352af7244245c2a4a88f4c344232d4dc3d6c5196f6718d3136db8f3e3426776d4871870a0a09d0ac4436c
- MD5 SHA1 SHA512
- Path /data/data/com.yinxi.practice.beta/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 37f69b00d6ca9747885f14f0e6d3ae11f633cf3f16ecd8f4b39ce562cfd08deb
- MD5 e63f4c90651a85d53492040613c1ae1e
- SHA1 2541677a11f92f87640962d80673c811cbce18a4
- SHA512 fe4775382afc58cb6d7cd0ccb3c43d8e556afb5f523773094279ea64f1db4529a372bb7353eb123d2e524ae57bfab5238ccc2318b44a78d2ba5139384e9aded5
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.yinxi.practice.beta/primary.prof
- Size 1KB
- SHA256 f8c51328685001c6e6835d61a0ad25ec5025825284404baac077510948c7816b
- MD5 8d9bce29de8d4095a7753b3df2daa2f8
- SHA1 d34d8aab3fe73801b9c761cfbc78a3c1a7814938
- SHA512 99606b05822ca8b77404ce87d1de0f12d6421b86f7fa23fb046c970b799f8964f18a3cb8a481a19c803f0c92e19d26ab5803bfc5aa23a19bfa154a06df248ecc
- TLSH T12331C90F950256E6923F5531369E5680E1E810247D9E2768FAFF242B5C4CF96EB0C8CF
- MD5 SHA1 SHA512 TLSH