dab2da3d318e7852a1f1e6f6a0f1620bba4e42e6219d4e7e765e48575e723f58

Resubmissions

10/07/2026, 14:31

260710-rv8f9adv217

10/07/2026, 11:38

260710-nrspvaaw6j7

Analysis

max time kernel
1s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/07/2026, 14:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LoveSet.apk
Size 6.2MB
Sample260710-rv8f9adv21
SHA256 dab2da3d318e7852a1f1e6f6a0f1620bba4e42e6219d4e7e765e48575e723f58
MD5 89349a0a3908089066e367045369841a
SHA1 3c62335981da0b1dfbbf1e6d18faa28c8c680fba
SHA512 445a6849ba8d7ea0d1342358775e0155e77e3b66bbb01b281c52aa48ba7edb1028d39c9587cef06d309e0a813c37f665dc9942f584db7218707bfd948d54efc7
SSDEEP 98304:XlPuN9F63ak956ld+nAGprpjUr93R9ZZUKG37b/zXu9ZM6hGQGbuaZxkD4OPG:XNuF6qI56mnAG7Ix74D37b/ze3jsZy4l
TLSH
T109662381FF51C92FC4BB94370EA6073126669C5F8A96974385EC362D2877AD40FC9EC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 2 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.rizi.gudume
Accessed system property	key: ro.product.model	com.rizi.gudume

Checks Qemu related system properties. 1 TTPs 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	com.rizi.gudume

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.rizi.gudume
/dev/qemu_pipe	com.rizi.gudume

com.rizi.gudume
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4768

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads