Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7XCIPTV5.apk
android-9-x86
5XCIPTV5.apk
android-10-x64
5nopie_open...64-v8a
ubuntu-18.04-amd64
nopie_open...64-v8a
debian-9-armhf
nopie_open...64-v8a
debian-9-mips
nopie_open...64-v8a
debian-9-mipsel
nopie_open...bi-v7a
debian-9-armhf
nopie_openvpn.x86
ubuntu-18.04-amd64
nopie_openvpn.x86_64
ubuntu-18.04-amd64
opensource...e.html
windows7-x64
1opensource...e.html
windows10-2004-x64
1pie_openvpn.arm64-v8a
ubuntu-18.04-amd64
pie_openvpn.arm64-v8a
debian-9-armhf
pie_openvpn.arm64-v8a
debian-9-mips
pie_openvpn.arm64-v8a
debian-9-mipsel
pie_openvp...bi-v7a
debian-9-armhf
pie_openvpn.x86
ubuntu-18.04-amd64
pie_openvpn.x86_64
ubuntu-18.04-amd64
Analysis
-
max time kernel
2248915s -
max time network
105s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
04/06/2023, 10:52
Static task
static1
Behavioral task
behavioral1
Sample
XCIPTV5.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
XCIPTV5.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
nopie_openvpn.arm64-v8a
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral4
Sample
nopie_openvpn.arm64-v8a
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral5
Sample
nopie_openvpn.arm64-v8a
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral6
Sample
nopie_openvpn.arm64-v8a
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral7
Sample
nopie_openvpn.armeabi-v7a
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral8
Sample
nopie_openvpn.x86
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral9
Sample
nopie_openvpn.x86_64
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral10
Sample
opensourcelicense.html
Resource
win7-20230220-en
Behavioral task
behavioral11
Sample
opensourcelicense.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
pie_openvpn.arm64-v8a
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral13
Sample
pie_openvpn.arm64-v8a
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral14
Sample
pie_openvpn.arm64-v8a
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral15
Sample
pie_openvpn.arm64-v8a
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral16
Sample
pie_openvpn.armeabi-v7a
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral17
Sample
pie_openvpn.x86
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral18
Sample
pie_openvpn.x86_64
Resource
ubuntu1804-amd64-en-20211208
General
-
Target
XCIPTV5.apk
-
Size
83.9MB
-
MD5
6b5ab731d719e0a4905030d578f84e17
-
SHA1
bcb968fd99ed46a6fd711af0cbbea9872009be51
-
SHA256
3f609767212de7480a3132db63ce90d75ef254df39b1e645179fad52dbb4c221
-
SHA512
87a292fa0c588276be1f307b548584b6288350d6461c5d914bab8f476134d0b46347ecfb0c3972d1ec7ad549afd77027129a2cc3981133e6de347d6ce24944c6
-
SSDEEP
1572864:mjwkweo4Hg4QDC2+LXZETiYxtGCUUHJ7WN24otofjEMRuBgJnkXdh6ehOaOmKaYY:0w9f4ATqLXKrxgk6N2Po4cJUyeh/BKa1
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.nathnetwork.xciptv
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5e975b74118bc026d26db7d1d4b5c249f
SHA1c1fe5edc628df2b9cb20417d414d597aad76bdf9
SHA256de070bd3056f4a4f43074f16c40ab26f399477ab238e72fcddb5f0d2c10409ac
SHA512790d08c1600b0c7890829cb0a5e40ac4d196cf493c17b707a4d5fcc719648d1af4de5b9b8f13de9710511d6433de8d9e161f89334a3fd39fa13fcdfb60a95bfb
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
88KB
MD5ec62b043a3121d25d4e11d8ceac9c21b
SHA1eec89fb8141b8c1e99d083ebfeead02e2eff420a
SHA2560b422b0111f35ee1bd0ff5c3d6f7852c61934c911a07ad967c089010904deff3
SHA512c076184ac55bf6a5745c408e387db495a54ff325b62dcd6753fbae271f6ba082502bb7d763000afc68bdfd5ce8b6b26c76c834ae3a99178e03e55396057ef73e
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD51f12f1d432bb16a1d2c12cc5d9f9958c
SHA17fbf8968b13d978e6b4d69cfa4d2bb8b82c1fd0c
SHA25646f80fd778d6f72ae35e0f1131e85aabf6aa32bf663910b5c822ee3a585c928a
SHA512e36d19ee0b8aeff64fb0b8c2316a0b719c7a2a37249580556d3b7eff2ae6863d777f706c351e8d2459bb680e482d01333fb51b0d521e6ee1c4858c6da21337e9
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
32KB
MD59b345a69ba4521a2d7466a0699ea16e9
SHA13a512c7ebb7098dee50ab7ea57751db01fd2f78a
SHA25635873b4243d10352b2439a202c7c956f6d13ca40cdb3c80f3aa355d34320360e
SHA512f9b70c5671f2f669161afce743b7de6bef91d83f136746dfeb04fc4f336a25461396b6622a31abd2d84fb32ebc8a2a5cb71370994bedabf6817c7edfab1abffa
-
Filesize
32KB
MD520c526dae293851649472df102907620
SHA18ec1ed0660a81192557b43eceacad683f61e6074
SHA2565b9667b2a74a20e3ade3f7c0e141e8398752c06fbbe4912137c0d0934b427430
SHA512c6abde59e4943318c9ecfdc9c4dbf956622cb70bfb3014da55337b0f9de30685187c1d20a99bf98f18be998560b6e2a53fd5e212c6a7094d6e1e582c0237d448
-
Filesize
524B
MD5faf9a65bf032805608c492c7522be0ec
SHA109ae5c99fa5a350752c1f98f1a0d0a340ca96122
SHA256dad7e144dd53bf2d3ddd6c8ee1a09f01b0f49382030ac22cc8aed705ae23d729
SHA51225ada305697f54584f41731ada1cf1118e7102fea52260bc84c90d1e26544a105433206f4932fcf1bab7a4fae1ca6afe67f937e928e5adb4d1495d3b03d4fe30
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
40KB
MD5c5dc5b5bf9fe063d237b72c66744e9c8
SHA1c674af060eb31c118e2d98e08328ecec6d60218b
SHA2568b581d8d3475324ff62eb86583ff78e566e6afa09bfc68abd3bd9505111eac70
SHA5125ee0aa6a40e84d19d3017ccc0437f2238ee17f55c594a31d7227917eddcfccb8a6bcd8119fbd3dbbdef95c33f19579f2f35b2135a0a29f9be19443f25b6fc8da
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
5KB
MD599603a73d9ffd93788d410d58ccfc9cb
SHA1998145ae861469f3faad92d7fc80f1c59e6d75cb
SHA25615fac9b9ff937fec4699614c8c8e7a73388567acb58d4ee027bea67763172236
SHA51262d4f0dd063e4c0f2240a5342aa5840a387deeed41ca78581edb5b0941c05afec0c9f25c346116d4897822b8bd4d80c6205da6d1fb66299441d79e55ff6f1024
-
Filesize
116B
MD5a82c746f493e2dc0c7055c02b42c2abf
SHA1ebc47b709e1126e9855e2c2341334b650fad5a1c
SHA2565ffb5502523c58ca0cc6ed877f2d3c1da488b0ed7fedce8d66be2b5a31526c9d
SHA51283b27f034498d8d92cdddb81928eed1fa69bc4963404597dcdda27d8534e4f7fc8500d97d7e64093dea3a256567d75bafb6314dea5f46794515b5140002fb562
-
Filesize
208B
MD5b155945b6237071941d4cc66c8218993
SHA1af2879c15c380d8151a39cddf8c2cc17c9827aad
SHA256320aae3255ee21edf74d034f7ae91fb8fe5e540a4e73a662e3760a47a3d921f3
SHA51278c0b1209711b6b9442fb1c98501182a98797a66b2eb3685d019357ff1fdaf774a95341874530bb557d0ea7b40e5c8afb3a98d529d440572c08783643ca78902
-
Filesize
253B
MD5a38ddeb35590c71594470130e394a9fc
SHA10e075a5cb74fce9ef8165c494f3408453aa32f3f
SHA25686f6b05c747f3162195f43abe2d5e4b59fc2c26bdd7f9a5fc53e4f3369c03b8b
SHA512935f550bc04d05e3146c269e61cc94af92414275506debd208ff7750765a0ffa2eaeed51130815957584ecda0a8246d35b7babe1b6757d9c1b8060de8d855a63
-
Filesize
135B
MD582473ca61310050a149b63fd04d0ee86
SHA1346585260a86a54daa8c1b5c359bcbdc0f141eca
SHA256a1f81b237b7d42e941b2733185b2fdd4a4c623e046cfa1be0c4288d4547b4955
SHA512f6f68861caded3ee0d68879cb548afb8ced635beaa81669905e42b9cdec29ec78e2682afe289f5238056bce63bcbc030c5c833c3a1d489a5458cfc1ff8150eb3
-
Filesize
4KB
MD51a035f22b9e710d9898f549b06b2af41
SHA175f75ff87b2389f4dc07c43e95f9a09db7b377fc
SHA2560c168f5c01bc73d5bf7c11f38a26f1482c58097fb89bffea9028663131fc1406
SHA512a90b0c2e5b6d527ddceac9a7506d390469c9ae8bec7b825c82424b6000700d4a79784f2d6debabeb6998d263971a762d69aba299cb4cc1f130869da3cecf4c18