Analysis
- max time kernel
13s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
- submitted
20/08/2026, 04:37
General
- Target Альбом медиа (36+) 1.36.89.apk
- Size 6.3MB
- Sample260820-e8th2aen4y
- SHA256 f1c375ece357d1cb7d0705dd3650d16a14ca3e743bfe8a5ffb73411625cce099
Score
7/10
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
- Checks Qemu related system properties. 1 TTPs 3 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
- Checks known Qemu pipes. 1 TTPs 6 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
Processes
-
com.xggcpi.bycylnwg1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
-
com.xggcpi.bycylnwg:vnc_Svc_cafd8b3d1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.
-
com.xggcpi.bycylnwg:vnc_Svc_cafd8b3d1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Checks known Qemu pipes.