e20d1f7f176c98742138df3c249dc6a298aca99c3ded7d068bb3dab51c2591e1

Resubmissions

16-05-2024 13:26

240516-qpkybsfb93 7

16-05-2024 13:18

240516-qkfstaee6s 7

16-05-2024 13:16

240516-qh3jsseg87 6

16-05-2024 13:08

240516-qdqdnsee79 6

Analysis

max time kernel
3s
max time network
999s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
16-05-2024 13:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

magis-tv-video.apk
Size

32.6MB
MD5

2227d9653b5591b275991ed8aa089397
SHA1

e6be7a5eab8c294e093046a89170a35ae12d2832
SHA256

e20d1f7f176c98742138df3c249dc6a298aca99c3ded7d068bb3dab51c2591e1
SHA512

621683faf6304fe42655d630a2a5f90a08e26e6a023ca929f5fa18bf410489330db3e9ff9792a1fa0d5cdd005ee0c1fa2650aade4edbd0f2e7e1ed1b43396568
SSDEEP

786432:v3jrbQULjGInXHJN7Xn8eIDRidU1HiUlT3gr/Ga:vTrEUeInZFXWEKH1gua

Score

7^/10

evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.android.mgstv
Accessed system property	key: ro.product.name	com.android.mgstv
Accessed system property	key: ro.bootloader	com.android.mgstv
Accessed system property	key: ro.bootmode	com.android.mgstv
Accessed system property	key: ro.hardware	com.android.mgstv
Accessed system property	key: ro.product.device	com.android.mgstv

Checks Qemu related system properties. 1 TTPs 7 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu.gles	com.android.mgstv
Accessed system property	key: ro.kernel.qemu	com.android.mgstv
Accessed system property	key: init.svc.qemud	com.android.mgstv
Accessed system property	key: init.svc.qemu-props	com.android.mgstv
Accessed system property	key: qemu.hw.mainkeys	com.android.mgstv
Accessed system property	key: qemu.sf.fake_camera	com.android.mgstv
Accessed system property	key: ro.kernel.android.qemud	com.android.mgstv

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.android.mgstv
/dev/qemu_pipe	com.android.mgstv

Checks the presence of a debugger
evasion

com.android.mgstv
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4279

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads