b45effbe386a05279f9824e80464742ad1aa6e646c6973fa03a40b46cba79401

Resubmissions

22-05-2024 03:00

240522-dhdt8aad2s 7

22-05-2024 02:59

240522-dg1mlaac9s 6

Analysis

max time kernel
2s
max time network
152s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 03:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

lt_5.43.0_1ac52114_20240511_1122_release_jiagu.apk
Size

31.4MB
MD5

e3a8f05492e43fcf566fc3f46c202392
SHA1

0fa89447449e00a8d0a44f7a069398e8eadee902
SHA256

b45effbe386a05279f9824e80464742ad1aa6e646c6973fa03a40b46cba79401
SHA512

89b06e19a561fd0561eb53e6321d2e19254276ba4a828c4d0998a10997651274b4a0227e16ea63cd94c4cc9f2a2f5193965c0f7399348d421101689d4e4dcb82
SSDEEP

786432:r3jrbQULjGIaBl36CXmnkLRdqz3ZeFm0HgXbt8T73KCoEH:rTrEUeIaTRmudqUc0AXRM6TEH

Score

7^/10

evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 5 IoCs

evasion

System Checks

T1633.001

Processes:

com.global.latinotv

description	ioc	process
Accessed system property	key: ro.product.device	com.global.latinotv
Accessed system property	key: ro.product.model	com.global.latinotv
Accessed system property	key: ro.bootloader	com.global.latinotv
Accessed system property	key: ro.bootmode	com.global.latinotv
Accessed system property	key: ro.hardware	com.global.latinotv

Checks Qemu related system properties. 1 TTPs 7 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

Processes:

com.global.latinotv

description	ioc	process
Accessed system property	key: qemu.hw.mainkeys	com.global.latinotv
Accessed system property	key: qemu.sf.fake_camera	com.global.latinotv
Accessed system property	key: ro.kernel.android.qemud	com.global.latinotv
Accessed system property	key: ro.kernel.qemu.gles	com.global.latinotv
Accessed system property	key: ro.kernel.qemu	com.global.latinotv
Accessed system property	key: init.svc.qemud	com.global.latinotv
Accessed system property	key: init.svc.qemu-props	com.global.latinotv

Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
evasion

System Checks
T1633.001

Processes:

com.global.latinotv

ioc process

/dev/socket/qemud com.global.latinotv
/dev/qemu_pipe com.global.latinotv
Checks the presence of a debugger
evasion

ioc	process
/dev/socket/qemud	com.global.latinotv
/dev/qemu_pipe	com.global.latinotv

com.global.latinotv
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4294

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads