Analysis
- max time kernel
24s - max time network
150s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
08/10/2026, 04:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nate+Hand+Gesture_1.0_APKPure.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
General
- Target Nate+Hand+Gesture_1.0_APKPure.apk
- Size 61.0MB
- Sample261008-e3a5hadb55
- SHA256 76c42028d0b4ec1dfd9c22c48a5c1a2f3798f9c27d03095a2441f5b91f047b58
- MD5 7c5eb495fe629f579e7a70f2bd93753f
- SHA1 93576587f526a61694ebf0e2c7a8f6e964e540f9
- SHA512 b8e73418ae13c9c19510e3f5f6b2795e28b25edc775c6586af3e573fc355af7e28202cea4655c4690f524e8dd9cb808310890f38170d3ff1093a10705a42b82d
- SSDEEP 1572864:72UMIfQ9SnXUNNE5EDUUN8DiKws6pYDGnTu2KfmsqxUqxf:S0QS4q5ED0uKwYDBOXB5
- TLSH T115E733A3D3089D56E25580F2D5E90EF566734D42AE03168FC67B763E68B7F88A532330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
description ioc Process Accessed system property key: ro.hardware com.gilangcumihitam.natehandgesture Accessed system property key: ro.product.name com.gilangcumihitam.natehandgesture Accessed system property key: ro.product.model com.gilangcumihitam.natehandgesture Accessed system property key: ro.product.device com.gilangcumihitam.natehandgesture Accessed system property key: ro.bootmode com.gilangcumihitam.natehandgesture Accessed system property key: ro.bootloader com.gilangcumihitam.natehandgesture - Checks Qemu related system properties. 1 TTPs 5 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: ro.kernel.android.qemud com.gilangcumihitam.natehandgesture Accessed system property key: init.svc.qemu-props com.gilangcumihitam.natehandgesture Accessed system property key: ro.kernel.qemu com.gilangcumihitam.natehandgesture Accessed system property key: qemu.hw.mainkeys com.gilangcumihitam.natehandgesture Accessed system property key: qemu.logcat com.gilangcumihitam.natehandgesture - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.gilangcumihitam.natehandgesture - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.gilangcumihitam.natehandgesture - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.gilangcumihitam.natehandgesture
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Android/data/com.gilangcumihitam.natehandgesture/files/il2cpp/Metadata/global-metadata.dat
- Size 4.7MB
- SHA256 6adb56a58f2d210473a617549162a93b9dfda53208d9794d97cbefbc82e735fc
- MD5 04aa24eef660c6e9b95deed351dbb727
- SHA1 8b4750b8928eead7c7086e9489c3db5653376718
- SHA512 4eadb4e3583228e2f2e870222d19e6f16abb69097c84ad08e01d8ae0d87b81d852d5038a3c896ca162f457d789e32ed6145b8df0b8190ec9fd5bc3a5889f80df
- SSDEEP 49152:nFOpUbChUrqgUBy/6vBQsciZv1SPGg5EK4qkSwiUKYq0CW11MMY7lpJof9W26MXu:qUrujvBF9E
- TLSH T14B36FA92BE68DEADC059E1B1784A82F41A709C4B9E009717B358B77FB4B1354FE1B2C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.gilangcumihitam.natehandgesture/files/il2cpp/Resources/mscorlib.dll-resources.dat
- Size 329KB
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.gilangcumihitam.natehandgesture/files/il2cpp/unity.ver
- Size 36B
- SHA256 8c77ddeea169fef35ecf969831e44a943c5ff992bebb644071dc5b955c1bc26e
- MD5 9ddb31d06c4e224b6bb814c708c33c3f
- SHA1 50383a5e7c46d5b7a9ea1a02632f8f39e4d37820
- SHA512 9cbcb887b9042e6e587251bbbe1d4af6f84c8e05a3258b158c7c667695a7134bd6ce3450671a33beb8e925ff92fcf834989d326cf5c02f7dfab3b56ceb0e2ccb
- MD5 SHA1 SHA512