4b777230cec72739e9fb255e75f719bb9c352fa1d67a657409d78694e7f2a872

Analysis

user interaction
yes
max time kernel
1s
max time network
151s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
22/07/2026, 03:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XuperTV_oficial_TV_1764408199.apk
Size 30.9MB
Sample260722-eftckavwez
SHA256 4b777230cec72739e9fb255e75f719bb9c352fa1d67a657409d78694e7f2a872
MD5 ebbb5c1a0080541470383fac15cb018e
SHA1 64a2d2b64ecda754a165e7ac07e6d8bc6a1dd7a1
SHA512 a05785432da8a6012bf9a2fbc9d10fcaa630a62c266d9fa371f6fb4f1dd88f5f2df9a984a2c2c7d34d1c7625d803d196a4c0459126554e146764a606615cae59
SSDEEP 786432:oOPtuiS22A2Q3aqW/GnUtmYf2mCo8V+Kqx2QyfBVqMXiMcw:Z432pSq6mqJRCrV02QyfBVqMRcw
TLSH
T138672397F72CA92FC0B715718EFE6120A76B0D014B12620B354C7A593A73ADC4E9E7C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.device	com.android.mgstv
Accessed system property	key: ro.product.model	com.android.mgstv
Accessed system property	key: ro.product.name	com.android.mgstv
Accessed system property	key: ro.bootloader	com.android.mgstv
Accessed system property	key: ro.bootmode	com.android.mgstv
Accessed system property	key: ro.hardware	com.android.mgstv

Checks Qemu related system properties. 1 TTPs 7 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	com.android.mgstv
Accessed system property	key: init.svc.qemud	com.android.mgstv
Accessed system property	key: init.svc.qemu-props	com.android.mgstv
Accessed system property	key: qemu.hw.mainkeys	com.android.mgstv
Accessed system property	key: qemu.sf.fake_camera	com.android.mgstv
Accessed system property	key: ro.kernel.android.qemud	com.android.mgstv
Accessed system property	key: ro.kernel.qemu.gles	com.android.mgstv

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.android.mgstv
/dev/qemu_pipe	com.android.mgstv

com.android.mgstv
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:3343

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads