399ac861eebd56daa5e6e0ac4a6cd3e901a7ce02567385c792008ef222014e13

Analysis

max time kernel
3s
max time network
38s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-07-2024 08:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

teleLatino_mmfp-apk.apk
Size

31.3MB
MD5

e07cf7928997298278097c08a0d67927
SHA1

3caaae47f6aae9d8ea843ec45bc3722ca28e7eda
SHA256

399ac861eebd56daa5e6e0ac4a6cd3e901a7ce02567385c792008ef222014e13
SHA512

d602ab1c519b66a44d55ca6c414e7abb372ce3b6ff45a17793d918ec1c11cc5cff1396695d28eae070989278ada6434099eca6dabee450ee50039d236d2f5120
SSDEEP

786432:rLzWq3IfOLzWq3IfDAOBl36CnmnkLRd/9NxFpMwUQRrI:rnn3Vnn3EAOThmudPxF6QR8

Score

7^/10

evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 2 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.bootmode	com.global.latinotv
Accessed system property	key: ro.bootloader	com.global.latinotv

Checks Qemu related system properties. 1 TTPs 4 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: init.svc.qemud	com.global.latinotv
Accessed system property	key: init.svc.qemu-props	com.global.latinotv
Accessed system property	key: qemu.hw.mainkeys	com.global.latinotv
Accessed system property	key: qemu.sf.fake_camera	com.global.latinotv

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.global.latinotv
/dev/qemu_pipe	com.global.latinotv

Checks the presence of a debugger
evasion

com.global.latinotv
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4260

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads