bb23f0cc167c69eb971d2069f8e3c06751a3f9c9e66a34ea12ea30a46dc00d72

Resubmissions

25/07/2026, 17:40

260725-v84l1asdqh7

25/07/2026, 17:20

260725-vwfz6sel4w7

24/07/2026, 13:11

260724-qe7dksep8v6

Analysis

max time kernel
1s
max time network
25s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
25/07/2026, 17:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
𝟭.Т𝗹𝗸.Тс𝗸𝟭𝟴+.apk
Size 6.1MB
Sample260725-vwfz6sel4w
SHA256 bb23f0cc167c69eb971d2069f8e3c06751a3f9c9e66a34ea12ea30a46dc00d72
MD5 ece68bf2f379a174c63a51b460091791
SHA1 99a0d9c9a3e62727750e96d5490c73fd5b77dc5f
SHA512 e30fb7c7ca96487664baa7e7c8c6770e79014f47d6586fa69979d9674d50f63ead642c6a8048b3fc6dc5373f55183985191b9e39f4eb4f2d8698b55f6a94b00f
SSDEEP 98304:X0RQ4TpgDL3I3r6cf8/kuOZjsaprQ+7t+Xe0L+kCkx90hzcu:C9qI32U8/kuOZYa5Q+7tCe2CkD0hzcu
TLSH
T150562281FF46D92FC4B741375A5207316266EE1ECA82E30795EC76282C77AD80FC9AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 2 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.muku.nuninicopu
Accessed system property	key: ro.product.model	com.muku.nuninicopu

Checks Qemu related system properties. 1 TTPs 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	com.muku.nuninicopu

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.muku.nuninicopu
/dev/qemu_pipe	com.muku.nuninicopu

com.muku.nuninicopu
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
PID:4917

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads