Analysis
- max time kernel
1s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
04/11/2026, 19:48
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
youtube_pro_signed.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
youtube_pro_signed.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
youtube_pro_signed.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target youtube_pro_signed.apk
- Size 122KB
- Sample261104-yjdaasft4l
- SHA256 97320defef57cfa743a9390d1a3f3206c83da20e50ea19b60f1587b8b83db0c2
- MD5 bbae989d959a5a617b570850ed1ec7d2
- SHA1 35da75455d0df36d8f6b6a3ee4c361be098a1430
- SHA512 cf2c486e799d6804ccd2b79dd4798ed23516655cfec668c652c68b0e00d03aaec0477edae36665b6d35aa3ba74a45d906ac7f2268bf957319b47c60bba399f52
- SSDEEP 3072:nqMPxvIbYZu8oq6UNKyr/lCX+3vUIuvEQFwT3f6Ph5X:nqMPxvn61g1lv/UIOEQCT3f6Ph5X
- TLSH T19AC3BE93B724955FDABB05B14D0B83351B37BD61CD14660776863B2C29B33A82F0A7E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.google.android.youtube.pro - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.google.android.youtube.pro - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.google.android.youtube.pro - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.google.android.youtube.pro