7af871b46ac7e033c0fded66f98b3451641ec52f3c0b7a1ffdb0fea4b07f2369

Analysis

max time kernel
2s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
04/07/2024, 17:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

32.6MB
MD5

1204e9184bc018cff3b74cd065a6f30c
SHA1

f5e0f7e7377f504f7be963c226a3e8ff55aa6706
SHA256

7af871b46ac7e033c0fded66f98b3451641ec52f3c0b7a1ffdb0fea4b07f2369
SHA512

79b2c1f513b3238ab63cf9550644f16731c0f988000c1c9ee4bd2c0d90a28738eaf112ea6daa99391f37415fe923f874182a66eab3f878a7e93602ad7aff58fe
SSDEEP

786432:v3jrbQULjGInXHJN7Xn8eIDRidU1HiUlT3gr/Gj:vTrEUeInZFXWEKH1guj

Score

7^/10

evasion

Malware Config

Signatures

Checks Qemu related system properties. 1 TTPs 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: init.svc.qemud	com.android.mgstv

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.android.mgstv
/dev/qemu_pipe	com.android.mgstv

Checks the presence of a debugger
evasion

com.android.mgstv
1⤵
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads