Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7XCIPTV5.apk
android-9-x86
5XCIPTV5.apk
android-10-x64
5nopie_open...64-v8a
ubuntu-18.04-amd64
nopie_open...64-v8a
debian-9-armhf
nopie_open...64-v8a
debian-9-mips
nopie_open...64-v8a
debian-9-mipsel
nopie_open...bi-v7a
debian-9-armhf
nopie_openvpn.x86
ubuntu-18.04-amd64
nopie_openvpn.x86_64
ubuntu-18.04-amd64
opensource...e.html
windows7-x64
1opensource...e.html
windows10-2004-x64
1pie_openvpn.arm64-v8a
ubuntu-18.04-amd64
pie_openvpn.arm64-v8a
debian-9-armhf
pie_openvpn.arm64-v8a
debian-9-mips
pie_openvpn.arm64-v8a
debian-9-mipsel
pie_openvp...bi-v7a
debian-9-armhf
pie_openvpn.x86
ubuntu-18.04-amd64
pie_openvpn.x86_64
ubuntu-18.04-amd64
Analysis
-
max time kernel
2248935s -
max time network
142s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
04/06/2023, 10:52
Static task
static1
Behavioral task
behavioral1
Sample
XCIPTV5.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
XCIPTV5.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
nopie_openvpn.arm64-v8a
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral4
Sample
nopie_openvpn.arm64-v8a
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral5
Sample
nopie_openvpn.arm64-v8a
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral6
Sample
nopie_openvpn.arm64-v8a
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral7
Sample
nopie_openvpn.armeabi-v7a
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral8
Sample
nopie_openvpn.x86
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral9
Sample
nopie_openvpn.x86_64
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral10
Sample
opensourcelicense.html
Resource
win7-20230220-en
Behavioral task
behavioral11
Sample
opensourcelicense.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
pie_openvpn.arm64-v8a
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral13
Sample
pie_openvpn.arm64-v8a
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral14
Sample
pie_openvpn.arm64-v8a
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral15
Sample
pie_openvpn.arm64-v8a
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral16
Sample
pie_openvpn.armeabi-v7a
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral17
Sample
pie_openvpn.x86
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral18
Sample
pie_openvpn.x86_64
Resource
ubuntu1804-amd64-en-20211208
General
-
Target
XCIPTV5.apk
-
Size
83.9MB
-
MD5
6b5ab731d719e0a4905030d578f84e17
-
SHA1
bcb968fd99ed46a6fd711af0cbbea9872009be51
-
SHA256
3f609767212de7480a3132db63ce90d75ef254df39b1e645179fad52dbb4c221
-
SHA512
87a292fa0c588276be1f307b548584b6288350d6461c5d914bab8f476134d0b46347ecfb0c3972d1ec7ad549afd77027129a2cc3981133e6de347d6ce24944c6
-
SSDEEP
1572864:mjwkweo4Hg4QDC2+LXZETiYxtGCUUHJ7WN24otofjEMRuBgJnkXdh6ehOaOmKaYY:0w9f4ATqLXKrxgk6N2Po4cJUyeh/BKa1
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.nathnetwork.xciptv
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD5b6ca8b30661a7844ed292db75a29a953
SHA18e0d397ab1f2ced1f143829084c3f53333743bdd
SHA25663a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
SHA512d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb
-
Filesize
1KB
MD543aa4ffac395fcfa698528e4d3bff38a
SHA1823b262f9af470cd310770b05c384d698676fd80
SHA256deeded9fff6d0a4c3fd788f2f94ee4966ac342b4151e543a195ea09dd03c8195
SHA512444bf5e8d857d888662df16f6da9a45d8f7216963ce92aecfe0a3a4c69e57558341cabddca556b2cd9f8eed02547de53682894a74ccbadfa1098103d7eb1a7c3
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
177KB
MD52351e33dc846391267bfd1b15386b0c7
SHA1d0afe2cc43c90937cc8bd34bb1c3af1f976a658a
SHA2560460f5299ed4e0c43f5a8ac74536c5997dbd6f9165d5b3c6c04c9f366f1eec6f
SHA51257069ba321b45acbb2af439071f7b911851a328c11bd664d4ea98f2665c1487798e9052ebf701965d5deb1cecd2b32d5520b1ed97aaecab87f3890e9699412ed
-
Filesize
72KB
MD5d641e85ab506f7b3a307120234f1825b
SHA1ff85871ec2b293b01b156141befdfd01d886a426
SHA2564a6fd37b99d771a9f710819a5c783b46b220166d7048a41269040c7414505bf6
SHA512cb022b231a323198968c45d5412f053d620ec69000f780e929e57b47753579bb52ab575c5a9b9c96998e92d9b881e6c0f00a60022ec7eb0adc9555d8aca0f778
-
Filesize
1KB
MD587ec4a49d6fdef58200e12c5341a4e9b
SHA1b1e65591db197fc7a17ef4c59da8285b232be1a5
SHA256fc221c28c8efb8e72ff31fcc9b0b42922e5a180e086c620e43558aee3a8728cb
SHA5128ce0bf89128fd3cbb2bbe7c24631bb7e26764d644d8a1b3c6fada1bee2ca0b034b0d99f4eb17536db5a075d082bc4d3d13b69b708191851b32cb06d6a1044cad
-
Filesize
88KB
MD55eae8a13dd5ce40e891b1f6a4732fe80
SHA16d734299ff139196e36dda40f81c5e1212d5b1d4
SHA256c4d05f2a29c49a77aaa6a37d1675c72d20626c150e365bec2ad273b076979957
SHA512b5c4a669022e5a431f26cf9f4148b6e2a37c6f7b5b96e671d8cf7e1262b2003dc1b48c850b1407b9cd1e4bf39fd9bf80d8e97e6a5eeef2a2ce2baf8166f3b8e3
-
Filesize
1KB
MD5661073082ec4dbd1cf127d2b250e0d93
SHA123908fa83bed1d92bd493dd6ccddefd74a0c3568
SHA256a2519d0783a0240d54e31c2d21acc870666888e7d5adfdfa9522c4c9a03870fa
SHA512c723ae3b0a79f25cbcfe1b83cbb2d2065cab16890d9867b9bad0b84ffc386bc75ade58cc1a41fcafa31f00f62f17d081da7c0833d32596781d11ca9b1bd4aa49
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
5KB
MD5070dbabce648d7ee101125596c2d1afd
SHA1d561ac13a8d2a8f069feb37494ef8fbe0ac72982
SHA256d1ff53044057c49f2f6fd29f50ab9ca3647362d0d0a424794d8a8373306de79e
SHA512a35770623e7a304ef59554ee5595570531fb075f30f6e175b958484482ce300586705beb475e87a352d250a9824049b9089725a996c8e83d40165efa42c6b1d6
-
Filesize
117B
MD5f70837c3ad1a46dd4945cac4c273f215
SHA127c0c98642a73ecb0388e62a4518a489c4eef78d
SHA2567a4e5f83293561ff679ba127044998591511b69a14e2e6a7d4cb12f9711c3e33
SHA51298eebc8457e9ef74986450cdeb97df488a963110aa8efd43421726dc2a318414ceb79554f67084e49997a16808a0aea38db182c731e280fd58b8733d83d8d526
-
Filesize
209B
MD50363ac5fdffd8317607e7ba9e2ca2588
SHA1b5980ac44721058de8e5329695497ca7b0510d28
SHA2560cd5aee76bf1a8d85a649c9ca529489100338ad4c346aa157d6fbad133554d4c
SHA51294fa34c04ad3abdd80b18efda70c1cb14b705576b1a19e25e5f2545945bf654ca0feb6f3114b5f39b79f32cbfa16864c97ade8128f7bc3cb02649b026a2bd1b7
-
Filesize
254B
MD52e6cd59489c07fd246783eebe842c79e
SHA16cfad8c9acb323f736c879694da45a4a3a6ea025
SHA25697a517360e62e80896ee07a3e819c6b61a620d64adb6f94deb8d437cb3f58211
SHA5124f622421144d31c63c2c8475ac5acc8ca86de0644976db82c0f283d6137940e990b5c8b9123bcc55d6ff6ceb0a3fd891d4e73837cced1d9a4104ec713479e51c
-
Filesize
135B
MD582473ca61310050a149b63fd04d0ee86
SHA1346585260a86a54daa8c1b5c359bcbdc0f141eca
SHA256a1f81b237b7d42e941b2733185b2fdd4a4c623e046cfa1be0c4288d4547b4955
SHA512f6f68861caded3ee0d68879cb548afb8ced635beaa81669905e42b9cdec29ec78e2682afe289f5238056bce63bcbc030c5c833c3a1d489a5458cfc1ff8150eb3
-
Filesize
4KB
MD51a035f22b9e710d9898f549b06b2af41
SHA175f75ff87b2389f4dc07c43e95f9a09db7b377fc
SHA2560c168f5c01bc73d5bf7c11f38a26f1482c58097fb89bffea9028663131fc1406
SHA512a90b0c2e5b6d527ddceac9a7506d390469c9ae8bec7b825c82424b6000700d4a79784f2d6debabeb6998d263971a762d69aba299cb4cc1f130869da3cecf4c18