Analysis

  • user interaction
    yes
  • max time kernel
    2s
  • max time network
    148s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    29/10/2026, 19:04

General

  • Target
    teleLatino_tloficial2-site.apk
  • Size 33.5MB
  • Sample261029-xq2e2asvcs
  • SHA256 42361236ce33705d5366e9df798bb1af11825d149c227a9af3122bd57b94753e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
  • Checks Qemu related system properties. 1 TTPs 7 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • com.global.latinotv
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu pipes.
    PID:3400

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libexec.so

        • Path /data/data/com.global.latinotv/files/libexec.so
        • Size 651KB
        • SHA256 7ad636af838b62daa7fb02bb440504c46b58d03040aee4bdb137b2686d5e7f89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libexecmain.so

        • Path /data/data/com.global.latinotv/files/libexecmain.so
        • Size 17KB
        • SHA256 29a20e40e2364b674bf2979968a2e1c05af98e1f921440787ae840b0c089ea33
        • MD5 SHA1 SHA512 SSDEEP TLSH