038941678984d2118ce58a14eb44f3fa5aab693969d9387846e5e6f6ff18024f

Analysis

user interaction
yes
max time kernel
221s
max time network
165s
platform
android-11_x64
resource
android-x64-arm64-20260325-es
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-eslocale:es-esos:android-11-x64system
submitted
22/05/2026, 02:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cryptid_Park_1.0_1772185939_latestmodapks.com.apk
Size 125.5MB
Sample260522-cve3dafv4v
SHA256 038941678984d2118ce58a14eb44f3fa5aab693969d9387846e5e6f6ff18024f
MD5 434d7f1e999379fd97e987a94336f5bb
SHA1 613dfebaf1682a8606ad0495d55f0b80490561a9
SHA512 f1b99ac2d78d03cd4f1a05bf77853378fadb35c79a1e34a61388fda3ed3c181405715db086fd0d2a83b08a37ea5e6ad516349a7a97aa1965d242f83c9bd40003
SSDEEP 1572864:cjs5390vjP+eCDAkSNJRIcdp5xUIfzo6umGZBEYIunar9X9eG:cwaL2e5k+pdpfO6uVBELunoNl
TLSH
T17F5812A3D7016D85D08400FB86D60FB8B6B75E416E125A1B4F33F97F6CB6B44AA36720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Checks Qemu related system properties. 1 TTPs 4 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: qemu.sf.fake_camera	com.HotPinkGames.CryptidPark
Accessed system property	key: qemu.logcat	com.HotPinkGames.CryptidPark
Accessed system property	key: vendor.qemu.dev.bootcomplete	com.HotPinkGames.CryptidPark
Accessed system property	key: ro.kernel.android.qemud	com.HotPinkGames.CryptidPark

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.HotPinkGames.CryptidPark

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.HotPinkGames.CryptidPark

com.HotPinkGames.CryptidPark
1⤵
- Checks Qemu related system properties.
- Checks CPU information
- Checks memory information
PID:4928

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

timerslack_ns

Path /proc/4999/timerslack_ns
Size 8B
SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
MD5 d46bf94e9eb1d22281a71504685082ac
SHA1 e4e0629aef7425ba63e897bc471f8625de44edd3
SHA512 68a1a1fd4de784e3a2e0e956d0a63ac4ca540ef90e7fd9a2ddc92cf68e52e29792db64f6615054a6e5460467f0b7abe055c899136d98ce6ebab3d580bc55ec86
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads