Resubmissions

26/04/2026, 20:08

260426-ywlgfaa18p

17/04/2026, 02:01

260417-cfvvaagw4x8

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    17/04/2026, 02:01

General

  • Target
    Xuper TV 4.99.2+LosElegidos+.apk
  • Size 23.6MB
  • Sample260417-cfvvaagw4x
  • SHA256 4306a99dd2d03375fc88051bc11463e10238242e391e4e5e42ac7ce6eab9408a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.google.android.youtube.tvx1x
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4211
    • cat /proc/version
      2⤵
        PID:4289
      • sh -c type su
        2⤵
        • Checks if the Android device is rooted.
        PID:4453

    Network

          MITRE ATT&CK Mobile v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          efsid4211

          • Path /data/data/com.google.android.youtube.tvx1x/app_UApm/efsid4211
          • Size 36B
          • SHA256 74edf98958c43fd3068649e8ccb302faf09eb6408ed3f8a5d56dcf23f6281fe8
          • MD5 SHA1 SHA512

          test.txt

          • Path /data/data/com.google.android.youtube.tvx1x/app_luna/block_cache/test.txt
          • Size 200KB
          • SHA256 4a0deb307b07e9457821e5e5609ae1b18ffbe082c28b17dbce605620797c1e03
          • MD5 SHA1 SHA512 SSDEEP TLSH

          X1XVT0EBUTUOY0DIORDNA0ELGOOG0MOC.ss

          • Path /data/data/com.google.android.youtube.tvx1x/crashsdk/tags/X1XVT0EBUTUOY0DIORDNA0ELGOOG0MOC.ss
          • Size 1B
          • SHA256 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111
          • MD5 SHA1 SHA512

          unique

          • Path /data/data/com.google.android.youtube.tvx1x/crashsdk/tags/unique
          • Size 36B
          • SHA256 1c5ae6b4a4ecb3e443829cc855e189245f4231ccba5f23e08b7b679298b71afa
          • MD5 SHA1 SHA512

          ver

          • Path /data/data/com.google.android.youtube.tvx1x/crashsdk/tags/ver
          • Size 25B
          • SHA256 b4d63985b8d50a9eb801acb28075b7270a2e1dfeed6d7cfe6a4fd7fbef2ca300
          • MD5 SHA1 SHA512

          BBDatabase.db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/BBDatabase.db-journal
          • Size 512B
          • SHA256 ba3c03cb6634e9895d9f3176674cc21ebece9fdbef7d9e4bd3270e0d3f14caba
          • MD5 SHA1 SHA512

          BBDatabase.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/BBDatabase.db-wal
          • Size 32KB
          • SHA256 b38389c896a77aed80d11472477d04aa3bf0880443ed9cdba2238e421baa0df3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          accs.db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/accs.db-journal
          • Size 512B
          • SHA256 cc4ad0d6244d47b2adeb4a1aca6fb9cb1a43c1bf0ef5aa1dac4d806ed06c5f20
          • MD5 SHA1 SHA512

          accs.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/accs.db-wal
          • Size 32KB
          • SHA256 019f4538a063a4e27896d6241fc2ece3893f8f1bc5ca35817b71d9642b6b2f0a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          addb-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/addb-journal
          • Size 512B
          • SHA256 0150d0f82a93619e5f820e173d2702a99e6107946de8a68f62990b00f8d65576
          • MD5 SHA1 SHA512

          addb-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/addb-wal
          • Size 32KB
          • SHA256 dba73bd4e8a64a96025495c0c8d6fb40b6e43dde0f311261d2913bd1d305cdda
          • MD5 SHA1 SHA512 SSDEEP TLSH

          com.google.android.datatransport.events

          • Path /data/data/com.google.android.youtube.tvx1x/databases/com.google.android.datatransport.events
          • Size 4KB
          • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
          • MD5 SHA1 SHA512 TLSH

          com.google.android.datatransport.events-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/com.google.android.datatransport.events-journal
          • Size 512B
          • SHA256 01b49b9ff548fc5123f852e43856e7c43f5cf808b94e4e99116cff618cf208fe
          • MD5 SHA1 SHA512

          com.google.android.datatransport.events-shm

          • Path /data/data/com.google.android.youtube.tvx1x/databases/com.google.android.datatransport.events-shm
          • Size 32KB
          • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
          • MD5 SHA1 SHA512 SSDEEP

          com.google.android.datatransport.events-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/com.google.android.datatransport.events-wal
          • Size 68KB
          • SHA256 b62cd47bf3578504880057eab8808bd91eaef547580d4b29a834ba4f5cbb1943
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 271dc3bc08aa364782491b8cbbc704ba893f4f45357a1c8e1191c02152e7ccc6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 5935a03f0b53793b741dfee8e3d4fdf712e854e083d2a76d1d23b93523a25cc7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 3fa951b776fabc7ba83de8f1679dd299aa2b2b552d51e3035aa9129771f50d4f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060
          • MD5 SHA1 SHA512 SSDEEP

          google_app_measurement_local.db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db-journal
          • Size 512B
          • SHA256 5cce4a77ff61004755dbf88b007f48204f12a9d94324046c83e2c51d82e70e28
          • MD5 SHA1 SHA512

          google_app_measurement_local.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db-wal
          • Size 36KB
          • SHA256 229c7c7a41e3476c4e08474f42915dd97d3cf4522347c6b402e45156ba5e09e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 570ac078774234466163cc34f4f98e3d1afb93fb4e4c420df1ea9e1108452e35
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 dd0aa171313f6dd8f5a23a649f2db9d1dafdff0901bc289b14a4dcab57d9c473
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 9dec77c6750c46087586fe7496ba20877e96191dd23d725d1f3b9d37ce73ca3d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 9aa468cbfca66429bb858c8669947e33d1a585e6f1dac5c5faafa55142cd3dd2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          message_accs_db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/message_accs_db
          • Size 36KB
          • SHA256 5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57
          • MD5 SHA1 SHA512 SSDEEP TLSH

          message_accs_db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/message_accs_db-journal
          • Size 512B
          • SHA256 dc7f66b0c17a2195f4c708a3809f284b2bdaaf0deeb4737b163fff835b4fec12
          • MD5 SHA1 SHA512

          message_accs_db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/message_accs_db-wal
          • Size 48KB
          • SHA256 25c7c994290e2cbf04eed789a1c82c9fa3a513f5b45487cace6ced1deb7401f2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          okgo.db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/okgo.db-journal
          • Size 512B
          • SHA256 aa99d6a1c39f38c84e415349c25ef480c442a56ff413b9c98089533f1002702e
          • MD5 SHA1 SHA512

          okgo.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/okgo.db-wal
          • Size 56KB
          • SHA256 1ff3ca49ebd0147fdb81bd59ae1322d1c89c253a4f0f964e4d000e92951d561f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db
          • Size 40KB
          • SHA256 ea66f6423250286dbcb4b340588324e0d5098a23d9dbeb0431660c78ffbd5592
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db
          • Size 24KB
          • SHA256 681cbb8699153e03915f15a11a107c764c74f0e6b270f23119bfe0828aa82787
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db
          • Size 32KB
          • SHA256 c360a6a4e01fd57cbab8d0167b901c1240d4f1bff1111556a3f0407a45935882
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db
          • Size 36KB
          • SHA256 ffa60e25935970924d189047246ddf80a90af62748773045addd44f520d219ca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db
          • Size 32KB
          • SHA256 808be418b2c045e2a16cba4c4898ced88e305a29c7ba56047a5a5d78dc1be084
          • MD5 SHA1 SHA512 SSDEEP

          ua.db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db-journal
          • Size 512B
          • SHA256 7dda8a656d176ad1dff3fe4576b5b39b2a039afea410ab5984baa2ad394873e4
          • MD5 SHA1 SHA512

          ua.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db-wal
          • Size 60KB
          • SHA256 348c8bafde1e9458f0d0fda022157a95962c3280db685d40c77824812d2ab84d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db-wal
          • Size 12KB
          • SHA256 82a0e807649924309e16ed529a57ef2e1d919666956e42f2c320505867611277
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db-wal
          • Size 12KB
          • SHA256 05dfb09b4b5770ee1bfa3297a5f602debdd674e67d1ea21e30b5090626ac09f8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db-wal
          • Size 4KB
          • SHA256 c6700fd95ff180d177af08207f4806b6d6d6e69684aea327a89f735bacf712cf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ua.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/ua.db-wal
          • Size 8KB
          • SHA256 67a0fb1eaced8ed942a1e665387f8e953a1de6532f53d506db6bc9a6be48daef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          umeng_zero_cache.db

          • Path /data/data/com.google.android.youtube.tvx1x/databases/umeng_zero_cache.db
          • Size 20KB
          • SHA256 6b618bb33d0d5f602233cc508d4eac2308503c91b1530027b9d7acc873f97a73
          • MD5 SHA1 SHA512 SSDEEP TLSH

          umeng_zero_cache.db-journal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/umeng_zero_cache.db-journal
          • Size 512B
          • SHA256 2e97e15e0639979753f44a6901402a31017431bd4e1e007a7a53017244eb4d95
          • MD5 SHA1 SHA512

          umeng_zero_cache.db-wal

          • Path /data/data/com.google.android.youtube.tvx1x/databases/umeng_zero_cache.db-wal
          • Size 40KB
          • SHA256 9cd97a026dec0da588b808bc609b1001d0512afc799a3474a47945f5a3919289
          • MD5 SHA1 SHA512 SSDEEP TLSH

          app.json

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/native/app.json
          • Size 233B
          • SHA256 b22bc5e0d07b7d640a6b6a02dd51b09f369ad9f1c3565ecc982042f811020bda
          • MD5 SHA1 SHA512 TLSH

          device.json

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/native/device.json
          • Size 194B
          • SHA256 12f31fdec8ba70ef50fbd48cf64827dc589fe0159a66adcfcb75d2a53ef5ea77
          • MD5 SHA1 SHA512 TLSH

          os.json

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/native/os.json
          • Size 55B
          • SHA256 bd4d56b8a3894787d825e6254049c869632bcb2923dfe9a0c768a1bfed5e5325
          • MD5 SHA1 SHA512 TLSH

          session.json

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/native/session.json
          • Size 128B
          • SHA256 12c795d6e50d8566c0202eeead29d9821665d36e1da4f0e877a6ca4d33637f13
          • MD5 SHA1 SHA512 TLSH

          report

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/report
          • Size 767B
          • SHA256 a04a4f403840b1e41d43c7c6ede5356b93e568374c40188ffb2aee2659eab29d
          • MD5 SHA1 SHA512 TLSH

          userlog

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/userlog
          • Size 88B
          • SHA256 00dbde32aea11b96127972edb1748df6957e619fb38713d6562a96f552ca8d1e
          • MD5 SHA1 SHA512 TLSH

          userlog.tmp

          • Path /data/data/com.google.android.youtube.tvx1x/files/.com.google.firebase.crashlytics.files.v2:com.google.android.youtube.tvx1x/open-sessions/69E1949700DA00011073B5B226472C82/userlog.tmp
          • Size 16B
          • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
          • MD5 SHA1 SHA512

          z==1.2.0&&4.99.2_7269288012000_emNmZw== .log

          • Path /data/data/com.google.android.youtube.tvx1x/files/.envelope/z==1.2.0&&4.99.2_7269288012000_emNmZw== .log
          • Size 287B
          • SHA256 f33c86e961fc618e0efa686ace2c6ad2a090f4879fc3b0cf2ab8f465dc54a281
          • MD5 SHA1 SHA512 TLSH

          exchangeIdentity.json

          • Path /data/data/com.google.android.youtube.tvx1x/files/.umeng/exchangeIdentity.json
          • Size 162B
          • SHA256 c5267638f06081840f16e428f0f92fe679823cf6bad2f7c9abc5e47b4b04cc5c
          • MD5 SHA1 SHA512 TLSH

          PersistedInstallation4527332601785751610tmp

          • Path /data/data/com.google.android.youtube.tvx1x/files/PersistedInstallation4527332601785751610tmp
          • Size 568B
          • SHA256 d1bf6f85f638b9e143dfa71422d5ca2db7546ef1bb0c8c10834ee4641c7ed462
          • MD5 SHA1 SHA512 TLSH

          PersistedInstallation6483027649749796864tmp

          • Path /data/data/com.google.android.youtube.tvx1x/files/PersistedInstallation6483027649749796864tmp
          • Size 90B
          • SHA256 0192b23a36e6173a2ea4050149b9cb03400f3351e1828e36e3589a828136896e
          • MD5 SHA1 SHA512 TLSH

          exid.dat

          • Path /data/data/com.google.android.youtube.tvx1x/files/exid.dat
          • Size 55B
          • SHA256 bd838c54524ab92c2b351832461e14bb1c12c4a6110fa4a8067f80ec5c0f0ad2
          • MD5 SHA1 SHA512 TLSH