3a03b35a4c614d651954f8298d5bb75abe33223e0791bdc1b9bdb2af69d3009b

Resubmissions

04/07/2026, 08:06

260704-jznzeagz6n7

03/07/2026, 22:52

260703-2tl7qsds2r7

03/07/2026, 21:14

260703-z3l7zsgt7w6

Analysis

max time kernel
2s
max time network
30s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/07/2026, 22:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TⲓⲕTⲟⲕⲣⲅⲓⲃⲁⲧ.apk
Size 5.7MB
Sample260703-2tl7qsds2r
SHA256 3a03b35a4c614d651954f8298d5bb75abe33223e0791bdc1b9bdb2af69d3009b
MD5 f8ddfddc6469d2619e784bf88adfbd29
SHA1 bba517b3bfbcf28a6e0de7c6b002b5b7aa70c6c2
SHA512 e1cfe10c4a6cbd33c6636f2298901a1bbe6cdd72a0613552ab2b15877b854334c9233fb3233131aac31c8a0cfab180dbd133b459d97b55f094d03c61c3bffed2
SSDEEP 98304:IsatFB3It8ABAdhkMb88zkrkRQZx0MOMvG5aXke9U3HbaLGQ0wM:IhP3q8AB0mMwkkwRKx0HaUe927wVM
TLSH
T15F562281FF46D82EC0B7443B1A860331665ADE1EC697A34795EC361C5C7BAC84FE8AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 2 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.zulose.nawedoxo
Accessed system property	key: ro.product.model	com.zulose.nawedoxo

Checks Qemu related system properties. 1 TTPs 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	com.zulose.nawedoxo

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.zulose.nawedoxo
/dev/qemu_pipe	com.zulose.nawedoxo

com.zulose.nawedoxo
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4746

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads