Overview

overview

7

Static

static

7

XCIPTV5.apk

android-9-x86

5

XCIPTV5.apk

android-11-x64

1

nopie_open...64-v8a

ubuntu-18.04-amd64

nopie_open...64-v8a

debian-9-armhf

nopie_open...64-v8a

debian-9-mips

nopie_open...64-v8a

debian-9-mipsel

nopie_open...bi-v7a

debian-9-armhf

nopie_openvpn.x86

ubuntu-18.04-amd64

nopie_openvpn.x86_64

ubuntu-18.04-amd64

opensource...e.html

windows7-x64

1

opensource...e.html

windows10-2004-x64

1

pie_openvpn.arm64-v8a

ubuntu-18.04-amd64

pie_openvpn.arm64-v8a

debian-9-armhf

pie_openvpn.arm64-v8a

debian-9-mips

pie_openvpn.arm64-v8a

debian-9-mipsel

pie_openvp...bi-v7a

debian-9-armhf

pie_openvpn.x86

ubuntu-18.04-amd64

pie_openvpn.x86_64

ubuntu-18.04-amd64

Resubmissions

04-06-2023 10:57

230604-m2nyzace5y 7

04-06-2023 10:52

230604-mye7nabh78 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XCIPTV5.apk

  • Size

    83.9MB

  • MD5

    6b5ab731d719e0a4905030d578f84e17

  • SHA1

    bcb968fd99ed46a6fd711af0cbbea9872009be51

  • SHA256

    3f609767212de7480a3132db63ce90d75ef254df39b1e645179fad52dbb4c221

  • SHA512

    87a292fa0c588276be1f307b548584b6288350d6461c5d914bab8f476134d0b46347ecfb0c3972d1ec7ad549afd77027129a2cc3981133e6de347d6ce24944c6

  • SSDEEP

    1572864:mjwkweo4Hg4QDC2+LXZETiYxtGCUUHJ7WN24otofjEMRuBgJnkXdh6ehOaOmKaYY:0w9f4ATqLXKrxgk6N2Po4cJUyeh/BKa1

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • XCIPTV5.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.nathnetwork.xciptv

    com.nathnetwork.xciptv.SplashVideoActivity


  • nopie_openvpn.arm64-v8a
    .elf linux aarch64
  • nopie_openvpn.armeabi-v7a
    .elf linux arm
  • nopie_openvpn.x86
    .elf linux x86
  • nopie_openvpn.x86_64
    .elf linux x64
  • opensourcelicense.html
    .html
  • pie_openvpn.arm64-v8a
    .elf linux aarch64
  • pie_openvpn.armeabi-v7a
    .elf linux arm
  • pie_openvpn.x86
    .elf linux x86
  • pie_openvpn.x86_64
    .elf linux x64

Android Permissions

XCIPTV5.apk

Permissions

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.assistant.READ_HOTWORD_STATE

com.google.android.assistant.WRITE_HOTWORD_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE