da51dc6988dd28b05b425cba4db56d81ca9fcb1dd2131690323c30dd9302d904

Analysis

max time kernel
1s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
30/10/2026, 06:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 5.6MB
Sample261030-g5stfadf99
SHA256 da51dc6988dd28b05b425cba4db56d81ca9fcb1dd2131690323c30dd9302d904
MD5 0c83653fccd26d707408e54451e4e5e0
SHA1 4fc6124f4551b401b81f7b5fbe35df0528c66127
SHA512 c256db65efb2b745f8f51eb05d6555dd721e3df0768823d366c29084afc113a8348f744ba229f8040b185adf24f13b03ab4575b1add245ba967beb525872b1f2
SSDEEP 98304:2HPNz0opndnkTo/rpc6e5XblrXaEv4iKs25iDf3BENfbDoTwr2r4i:2HPNxRkTqc6eJxrXaEv4iIibRENfbWH
TLSH
T16F56F1D7F798692FC87740F2896E5271124B4D168A839B876D48331C38776E82F5EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/su	com.namazi.app
/data/local/xbin/su	com.namazi.app
/system/bin/su	com.namazi.app
/system/bin/failsafe/su	com.namazi.app
/system/sd/xbin/su	com.namazi.app
/data/local/bin/su	com.namazi.app
/sbin/su	com.namazi.app
/system/xbin/su	com.namazi.app

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.device	getprop
Accessed system property	key: ro.bootmode	getprop
Accessed system property	key: ro.hardware	getprop
Accessed system property	key: ro.bootloader	getprop
Accessed system property	key: ro.product.name	getprop
Accessed system property	key: ro.product.model	getprop

Checks Qemu related system properties. 1 TTPs 5 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	getprop
Accessed system property	key: ro.kernel.qemu.gles	getprop
Accessed system property	key: ro.kernel.qemu.vsync	getprop
Accessed system property	key: ro.kernel.android.qemud	getprop
Accessed system property	key: init.svc.qemu-props	getprop

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.namazi.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.namazi.app
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
PID:4706
- getprop
  2⤵
  - Checks Android system properties for emulator presence.
  - Checks Qemu related system properties.
  PID:4756

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartApp-d6864f2502af7851

Path /data/data/com.namazi.app/databases/StartApp-d6864f2502af7851
Size 16KB
SHA256 62526d0d74d9f815107153e2f9a3df1be9b54d5b0f49b319235473a1b4bac77b
MD5 72b2a55ec4c8795f11fe7be346be677c
SHA1 475414536ed894c93abd560d1dbe782adf052348
SHA512 a09584784b4baac990813d796caee570416b97a901eb48a7733d575ef2a15bae05255d8423b80a32c86b8ed79b1d0eb44a290ae06df42053327af50deff6618e
SSDEEP 12:TLpEQtO0LrScw7Gvvcs47J4agnJFxYz8b818MMlosgkfRmBEyPbBvOw:TLjtO0iMncvJRAFyz8b818MM4k0GSN
TLSH
T16D724C9E5B903344C0A64173EDE282573E7C766D07635346697018F15C7BE33B162AE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartApp-d6864f2502af7851-journal

Path /data/data/com.namazi.app/databases/StartApp-d6864f2502af7851-journal
Size 512B
SHA256 1923a2397740a9a59c6142468ee4219d12da812dd5efea532dc5150882751998
MD5 6f290f63669f3ee9b46b0963de034ec5
SHA1 964c1db6bc0f05fc8c9a7ab9e4f069289e1926aa
SHA512 b0b6a9a8edb5dd16ad5924379599813624abb18578e68e74a46bdad5016df6c37e5c0a847df6feedbe3ec476bd3cd7ab81e111702d10bffb7736738817130284
MD5 SHA1 SHA512

Submit Download

StartApp-d6864f2502af7851-journal

Path /data/data/com.namazi.app/databases/StartApp-d6864f2502af7851-journal
Size 8KB
SHA256 18a9f948dd1046e9537b3ac911e5ab817d065e1b1f7df79126367950eeef42f2
MD5 1061f0fc817b0aa2f54db3c684bef8e8
SHA1 20973d036cc617b2774cbab9951c439636089254
SHA512 1934d3c51f9897ffff53f8b9ea0e0c5a22297cb89b2e22351c86f44888e831bd8b15a13238853aabb2ee9c455784110b344a7aa08d3282a2c7fb50bdd5bd961c
SSDEEP 6:7+/l9D/lSFn1blllng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKy:7+th8BqLiuWdYRmBEyPb1
TLSH
T16602228963801A12C82E367B90D4C3400E00AB388161CB17179208A82C0B4CEA4A0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartApp-d6864f2502af7851-journal

Path /data/data/com.namazi.app/databases/StartApp-d6864f2502af7851-journal
Size 8KB
SHA256 88b89245c9d50549c6ed0f4fd5a55b549f761e86ee8f28407f8d64403747ecef
MD5 1fea3ba176551835bccfb1c4e62018a2
SHA1 063c3cffb73ccea201e3de4ef81b11cbf2c48e44
SHA512 b25a2ca0c29de6335837f790f110e9b5a2a7724612c534c8e90709235a0ddf8807e98abfdd280bba8d448b18000a8c41bfa802c972d357fee00f91831a65675e
SSDEEP 6:7+/l9ppl4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKH//xpn:7+tZiqLJdeWRmBEyPb4Xxpn
TLSH
T17202228863440813C33977BBA0D883401E20A72CA233CB27169109542C066CCE8A0E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shared_prefs_sdk_ad_prefs

Path /data/data/com.namazi.app/no_backup/shared_prefs_sdk_ad_prefs
Size 153B
SHA256 442119e7d928fb4104db389d612cea7e759921dfab3054367414d3fe7e6392ca
MD5 987cb051364aa6bea7d04c511cc9c24e
SHA1 9af0868fd62c3a0b4e575e4e1a982e4e77a42f83
SHA512 48a57fb0e3d08471df1ac3a2fac19e3a59bc1b487aee5281bc70e30952428022e2f3d032ad5775e56bf21264b9f0f874e719cd3a377a152675e7a8ef17c6c1b6
TLSH
T14AC08C0B8212A82D7F30205C9C824F0B46100E67852F5DC02C370062AE08BC256BAF67
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads