Analysis
- max time kernel
7s - max time network
157s - platform
android-13_x64 - resource
android-33-x64-arm64-20260721-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260721-enlocale:en-usos:android-13-x64system - submitted
20/09/2026, 20:52
Static task
static1
Behavioral task
behavioral1
Sample
Gov_F48E09F6.apk
Resource
android-x64-20260721-en
Behavioral task
behavioral2
Sample
Gov_F48E09F6.apk
Resource
android-x64-arm64-20260721-en
Behavioral task
behavioral3
Sample
Gov_F48E09F6.apk
Resource
android-33-x64-arm64-20260721-en
Behavioral task
behavioral4
Sample
Gov_F48E09F6.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Gov_F48E09F6.apk
Resource
android-35-x64-arm64-20260721-en
Behavioral task
behavioral6
Sample
Gov_F48E09F6.apk
Resource
android-x86-arm-20260721-en
General
- Target Gov_F48E09F6.apk
- Size 3.3MB
- Sample260920-znq8dsdr6w
- SHA256 ffd0c7aeb3b2a49d19106f12715b1d0f4adbfc49d4e0e36941e52bd2aada970d
- MD5 f632058fbb5f85908e3ca412f549b246
- SHA1 34b1d60c0817b5aa472f24837fb9870471ed8b9d
- SHA512 2e5cebf630372c71eadd84adeea50487fc3949d4f0b3091ed84e4f75baf77fc1acabf145a545d582d3b202023b75c97740d9a5f37985284ea4e890a8c45ffc60
- SSDEEP 49152:X/uamSmrLmwiQCaHDaapEHdHtODStzPwQY3xF7OpKVHmdIZnglh+oTwrmCEFanrl:NmSlwiQHHDJ6mldhNO4+IboTwrmCEox
- TLSH T1C1F5ADCAFBC4A96AC4F75736853552A251474C268B83DEC76D44323C29BBAD01F4AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks known Qemu files. 1 TTPs 3 IoCs
Checks for known Qemu files that exist on Android virtual device images.
ioc Process /system/lib/libc_malloc_debug_qemu.so com.arlosoft.macrodroid /sys/qemu_trace com.arlosoft.macrodroid /system/bin/qemu-props com.arlosoft.macrodroid - Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/qemu_pipe com.arlosoft.macrodroid /dev/socket/qemud com.arlosoft.macrodroid - Checks the presence of a debugger