003c8b6e9afe4a3f17ab45112a99ad8d2bf715f1981a521c61dab5f453a1d827

Analysis

max time kernel
65s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
05/09/2026, 11:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PlayZ TV_2.3.1.apk
Size 12.1MB
Sample260905-nera9ade26
SHA256 003c8b6e9afe4a3f17ab45112a99ad8d2bf715f1981a521c61dab5f453a1d827
MD5 46a560160649f6110310a9745b1db21d
SHA1 48fd49f147325900553b7d90b99883a15f55493d
SHA512 e793675eabb26c93fcb57309b4b60aa5e9905c774c30b3dced0246e02f294fdeba4a185e2e350c11ed665ef8a5b326ca0d93554101be617e4f941c9e33481c93
SSDEEP 393216:h2xNIKmYbDasJvil3pOS3Wik4Rqj/j3HMlzQut:MxNaYbD1vi/V84M/jWQut
TLSH
T150D61286FB59D92FC87730720DAB5271226B4D158E82A74735483F2D38776E80F89BC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	com.playz.tv
/data/local/xbin/su	com.playz.tv
/system/bin/su	com.playz.tv
/system/app/Superuser.apk	com.playz.tv
/system/xbin/su	com.playz.tv
/data/local/su	com.playz.tv
/sbin/su	com.playz.tv
/system/bin/failsafe/su	com.playz.tv
/system/sd/xbin/su	com.playz.tv

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	getprop
Accessed system property	key: ro.product.device	getprop
Accessed system property	key: ro.bootmode	getprop
Accessed system property	key: ro.hardware	getprop
Accessed system property	key: ro.bootloader	getprop
Accessed system property	key: ro.product.name	getprop

Checks Qemu related system properties. 1 TTPs 5 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu.vsync	getprop
Accessed system property	key: ro.kernel.android.qemud	getprop
Accessed system property	key: init.svc.qemu-props	getprop
Accessed system property	key: ro.kernel.qemu	getprop
Accessed system property	key: ro.kernel.qemu.gles	getprop

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.playz.tv

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.playz.tv

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.playz.tv

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.playz.tv

com.playz.tv
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4948
- getprop
  2⤵
  - Checks Android system properties for emulator presence.
  - Checks Qemu related system properties.
  PID:5035

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/data/com.playz.tv/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events
Size 56KB
SHA256 2c952d5958054182523d804bd805d5c85c2d649ccba1a7c932fa45f73c2d68c2
MD5 872e1a502ac4a03bc5bb6f0b0476bf8f
SHA1 3444de78fa76b66ee2640d74c1af0890652ad910
SHA512 69dd092202e1a7441fea209db3852389546335b4d5e2bb8ded6b6c6703bf694760fe98d3bf8ea27d31657cb40aeb82f436b99b688778dd68fc7a64bcddc4f7d7
SSDEEP 48:TG59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSW5YFXfb7tFXfbk:WMEqzAiwIyNjaW5Wb7jbk
TLSH
T19D43855D4A3C3231C66D683DD7E243A31E7CA3CF572292213DA49DE6CCC206578254A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 83c45d1689aff7c19c1f2cc7a36ac61f9688815bbcd28895e542a8b099ef2b26
MD5 fa4b9d7ca9c1fc78c6f5aeb5d5e34ef4
SHA1 a4f61788779027336c68cc8d14a7fb0b3b176279
SHA512 8e65927a626fa33078522415702879c96423478ddfcd8c53dfca2affadef74284bbc2c911c98e941495c30439cdbf01dc7cecbb532fa0f72d3d8ba3f518d397a
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events-journal
Size 24KB
SHA256 bedfef560897666e82b2d4ef1a97585df30a711e6d09b41e9de2f217d055e6e9
MD5 ad139b57990c5fee4faec1ba173ba897
SHA1 6a231ea6b6677c9e556ad478fd311648f7d02022
SHA512 ee38d2c196507a83cf13184d8392ba8ae402b60f2a0bc382783f22907a301289a6cb793be1be0beeaee9bfc70e07237ee4f053b9784a9999bf98e27afd5a8d40
SSDEEP 48:7M7ex1qG59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSy:7F19MEqzAiwIyNjay
TLSH
T1C1B2745D293C2210C5BE283ED7E202635D3C63DF572396603EA49DEACDC246AB0355BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events-journal
Size 16KB
SHA256 42408d34026c0cfce7a0d1101ef6a84b331d6f42b1f03a8ee66c6805f45a9598
MD5 1a02991498be168178f58df296f49c15
SHA1 413229ce50fd427641296d934265556c80c70904
SHA512 9dbfddfa726dc1046183ab553e603fe2c19b6dd7e1e41289772b0124b3a3377716607ce306d870cb8e1ab400b9c622b79ab5ac41c2b1ed5ff5c18d81828a4de0
SSDEEP 96:7HzyiZhfslNVXoXInGpYtMEqzAiwIyNjaB:7NHs5YYGmX3w
TLSH
T12072FC8EA93C1331C6AFB57EE7E105631E3C138F6B23617039E88D948F8506D707656A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 e46c3c0908b67ef98715471a37e15d5dc7d932e747016b58ba578bf6e45d7ab0
MD5 9f923d5a4ddb3f3186b6595fc3d46b31
SHA1 d4c3902fcf347c92700236f1299a36b9c5312350
SHA512 8c4e96b53ace7e00c06b6ba38e60ee77ff932769a45c4ad48dba4f211f3e46ca34e21f2effbb1a2240554a7222468332b6725faddd7fd37580fe547bf1856a3d
SSDEEP 48:7M7VFXfbBqW59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSPV2qTq59MENkMwH:7wbBNMEqzAiwIyNjawdMEqzAiwIyNjaZ
TLSH
T11B92849D5D3C2311C6BE683ED3E243A35E3C53DF972391603EA48DEACDC2469B0255A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 f8dec06597680c257b6db8c28c385a38ef52d8196d9c66c2e809a2fe8117cf63
MD5 d55cdb5cd779539df2d9b2e410daf2c3
SHA1 c3bab9016a41b657842972c3a8786d9981626bd6
SHA512 d6eb24857a000207d07654841c2751b390490c65a1c1a763f7e39e53bed512a04de6931d1ad7c06e8401e3450e6094b7575ec562b29253cc26e646abb21c4a19
SSDEEP 6:7+/l9FHn1uWWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKj:7+t8WWqLiuWdYRmBEyPbA
TLSH
T1C102C08C6B812C13C82D1677A0D4C34C0D04E7288171CB5B26E00898BC47ACCF4A6D46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.playz.tv/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 1e4cab2ecf39bddf880beef5b928523574d445dfc1f7d85862ca3ccaf26558fd
MD5 01d27ae8ed0d3abec23c0d7af035ad7d
SHA1 8964a7c2df70b9d7c8e6f9a8221d91b4e1c59c12
SHA512 786ce9da4e780cfbf1d67e08514a07ee5b3bd6fa9187b6d96d2c8067a9ad301d9c851fc9e1d6f5131df3fd42f86f6741da50a2a5f990072f70002ebd22b7424b
SSDEEP 6:7+/l9ePg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKs1Ju/P:7+tgqLJdeWRmBEyPb3JeP
TLSH
T1AB02229A63400903C12E1BBBA0D983A01E19E728E223CB0726A10A646C466CCA890E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.playz.tv/databases/google_app_measurement_local.db
Size 16KB
SHA256 75a2d2023d50c10f094a1836df50bcf727374dad7d949ef00180bd52dacd5152
MD5 a869eaa41a737ae2de9a2923d908b09d
SHA1 8f6c4b2f1eb1c0cf9a8c18a21609775cfdaa3901
SHA512 75605e5de07684cc280431c13512ea44dc8b768fa88b3d59ee2554c4811d2132a830f90943415b557bb648d4bf3894e2e998e05beed8b10f9ba02e22d56596c8
SSDEEP 12:TLWuEmO9zmzrfRmBEyPbBvOwhk/0RT/VM/QCL:TLROpmzr0GSNh/RT/ad
TLSH
T1F872558DEB20E207E1774736E8DAE3D23D74316A0323C607BA910B5C5D8234564A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.playz.tv/databases/google_app_measurement_local.db
Size 16KB
SHA256 6e2dbeffeaf57476b713ea13ee7735580d45519667c1c17077c1748f7538efeb
MD5 4a2af90cbdb565a1d1216465153b1e1f
SHA1 758b6de2f3d9dd9c859e4927903b32581fab91ca
SHA512 f37677e4478b55358c55a75272a28a63c40fad2bfe72a800ea9962430086bb7cfb4bab313351044eff64cf9b9b976ff75b1c505a2ab365161150b4407a94b90e
SSDEEP 12:TLiEq9zmzrfRmBEyPbP/3p/0RT/VM/QCL:TL4pmzr0GSP/3SRT/ad
TLSH
T1837255CDBB209603E273433AA8CAD3D23C24316A0363CA477E500A2C5E82645A0A1F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.playz.tv/databases/google_app_measurement_local.db
Size 16KB
SHA256 505eff8abb8a2566fc50dd5135ecc936617bd4c070d66915d4b575c1077881af
MD5 e8e2ffa2464d487110d5158305dddb9a
SHA1 45c0e90c85c7c2f89013b5e07b3672448f1f3771
SHA512 e36e95004c023cfbd4437a6d7fe3981c726ea0d93dacefc45b4b126505f21a21ee8bff6a427e840947cf5dbec3602f24cc6042b9be6cbcf26bd79589ca29fb0c
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hZt1kn+/0Fl6gTP4p/0RT/VM/QCL:TLopmzr0GSP/hZtunlFfASRT/ad
TLSH
T13672248DBB10D707E267873668CAA3D22C3431658723C6567E411B5C5D827865152F05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.playz.tv/databases/google_app_measurement_local.db
Size 16KB
SHA256 f53ab46dea80c4486ab16c6646edecee2b283afa24b4cc2af43bcdd60a12c456
MD5 ab29c9df45ffba1ade9ee66ae57b7418
SHA1 37254d02bbe6a69cc48a0812f8ae7083201d563d
SHA512 e4181d25d86407eb0a29b7e79b779d520e53aebf59a711ec863773e6abcf262b5bc012a44b918293b8ac33fc89f13b04058a36d93559b699e3e0b61888260530
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/QH49blqYFlIN+n+/0Fl6gTP4p/0RT/VM/QCL:TLYpmzr0GSP/s499FnnlFfASRT/ad
TLSH
T16E7221CAB620DA07E2774739A5CBE3D23C3531620323C65ABD021B2C6D823869262F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.playz.tv/databases/google_app_measurement_local.db
Size 16KB
SHA256 daf8f9dd6aa78d03c3b56dca092999fc1404d8cca3547b6bc115285ec96e64b7
MD5 3bb9a7589a917da8f17caa6a8a370186
SHA1 0ecc44c85d69e9bded6628dc332e36066e7287c1
SHA512 8bde88da42e541e17b1cca3d51716b483174f77a7b14778b5ccf913bfd7938a08ee708f547493ad931432e3ccb4c86c03f720f1d8eea9f38f56f75372198a9a5
SSDEEP 24:TL6vpmzr0GSP/oOl5hKamNZ2odX499FnnlFfASRT/ad:T2vArSP/o0camNoAI5nn4iE
TLSH
T1B97266C9B6A8DA03F2734B3955C7E2C23C3931A60723D356BD021F1C6D827829122F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.playz.tv/databases/google_app_measurement_local.db
Size 16KB
SHA256 37217e6fd769bea015af0fad8dd9128c6f458fe9418f363be964e93f94f9221d
MD5 73ac63235769c00e718d6dd0cf7694b8
SHA1 152641ed0b19dc35bfd48fc36250c24bfb4c7397
SHA512 2db186b68eac9c931a4fb5241ed7c7b32d965e9952c0dae5ecd5fc378c859cb1a4251b08cd428c5722fc2355ca9073a71a58a70bd3d949b235e3801215bb6dd2
SSDEEP 6:l9bNFlmls10l/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Who:TLUE0lv9zmzrfRmBEyPbP/Who
TLSH
T17672C28D9F102607C6760732B8C993B15C18636D83379A472BA50464BD4248A9091F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download