9df3efb005d0f4b5864cdb40f399c58591f342c716c82ab4fd257889f1deb2f3

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
18/08/2026, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Nate Hand Gesture.apk
Size 86.4MB
Sample260818-ryhp1avyew
SHA256 9df3efb005d0f4b5864cdb40f399c58591f342c716c82ab4fd257889f1deb2f3
MD5 1d9e826deae05f1d5733e36a3420483d
SHA1 021f761aede9b9d870703a4414aab2b864d742e3
SHA512 cdfc1a96a4dc6fc7b7f886a78db3cceb97db838cbb2bec8a5f2399fc62403bd590bbe833e502c2cc12e388df6f89d40552fd87541575c63e5990f8dccd2e8136
SSDEEP 1572864:/4iAain52NN02FAr6bEKfmsqxiuVN/iw0Iqx8:/4zt540GZOXb7/iwyW
TLSH
T104183393D708AD0AE29141F7D9E50AB565E34C01AB13164FC727773E5CB2F88A936B38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.bootloader	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.product.name	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.product.model	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.product.device	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.bootmode	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.hardware	com.gilangcumihitam.natehandgesture

Checks Qemu related system properties. 1 TTPs 5 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu.gles	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.kernel.qemu.vsync	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.kernel.android.qemud	com.gilangcumihitam.natehandgesture
Accessed system property	key: init.svc.qemu-props	com.gilangcumihitam.natehandgesture
Accessed system property	key: ro.kernel.qemu	com.gilangcumihitam.natehandgesture

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gilangcumihitam.natehandgesture

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gilangcumihitam.natehandgesture

com.gilangcumihitam.natehandgesture
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks CPU information
- Checks memory information
PID:4765

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.gilangcumihitam.natehandgesture.v2.playerprefs.xml

Path /data/data/com.gilangcumihitam.natehandgesture/shared_prefs/com.gilangcumihitam.natehandgesture.v2.playerprefs.xml
Size 129B
SHA256 9b1958617ed977bb53bcd9f7a16c7bd423e89adf9beb0f60105dfd865d31f141
MD5 6399d119f41e3cb4ecfd9ae569a0731d
SHA1 d166654957e6141d347f00257e195dee8afdc238
SHA512 fb07f7c51bacee3b43db118b7f72a233e8a06dfe6c068dd7dc89595e5ff55b33e8c86d5d821c276d7b2e7d3c76c90ad89fac57518f2ddd7610000c0606cb1f1f
TLSH
T1A9B02BF0D0F46D5259C0080544201A4422753663020838C05C23B4300FA8240026E110
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads