21adfc4ae484365c58f7c67ecf4db09978cd554712a72b3b9bc6158d7d57cf10

Analysis

user interaction
yes
max time kernel
19s
max time network
460s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
27/05/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Blade UHD vMOD.apk
Size 72.9MB
Sample260527-ft47naft3m
SHA256 21adfc4ae484365c58f7c67ecf4db09978cd554712a72b3b9bc6158d7d57cf10
MD5 65cb9b715af5be02d27875cdef79f301
SHA1 76e867c1eb6e7c492fa3ab15f2cb954607460ad2
SHA512 93a388cc669ef979eea3f6d0792d13fd46b87d9c1289c0a03edba5b87f9202462dac9da462f2aac5faa6f2cc4299197f0f0bcb788472237e25c18db0f6905012
SSDEEP 1572864:91WJpc6lAFMkSWjyxsfTUz0/V2uFcdLxogUFYIidfaMUzYhQB:nwceFuasfTUzg6dLq6HdfaMUT
TLSH
T1F4F73383F7A8985AC0F3C37189B10662129B5C648F43EA97791EB37C47B79E05E85EC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

impact persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.nathnetwork.bluenow

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.nathnetwork.bluenow

com.nathnetwork.bluenow
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4292

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

xciptv.db

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db
Size 28KB
SHA256 e7e37de1be59d8b2473b8eac0753abe20b6d6eb0aad6c7eb4549b98cedf17294
MD5 f992a383de85205f6cb7fe9a04442114
SHA1 f0fb1ae32636f9fde8b15981c5022be8f5da0b03
SHA512 464e6b7cf703d03baa9078a79ac047282e84bf2ab554210914c56ae0e7cd5964ccd11cd04cfdc92a744feb875015820b6ff96265eb57989e736df77ed35b2d42
SSDEEP 24:Tlansm25udxyO5uKLqYhFABAHQ/ox9rIiGSiGQQ:TlansEPwKp7ABAH+60S
TLSH
T191D285E386142737CA080170DCA853936DF49E0FDD82079236BB8404DDA3D99E8A2A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xciptv.db

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db
Size 20KB
SHA256 3db59165e827f1e775770f939ae9efc296400d6b3f113d977c392b4ebf9d33f9
MD5 09ac1ea955c93c9defa2a1ae3904843e
SHA1 031a2a9ba0c2e7c4c203fae39e182b5dd2bfe931
SHA512 4a4ee89f040de258d882571c25bfc12bbb162f9b40b15d013e01babbdfdd643532168389deff0506d44b54e1bcada630d97139e0cd87e8866b709d4ab6b2ddbb
SSDEEP 3:o1Xll41Xll:oQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

xciptv.db-journal

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db-journal
Size 512B
SHA256 16d48c12e9add7f26493e3077246f9027b8d4703112d70038d919de844670b14
MD5 434c153b7e9f509e08d3e8c109e8d7ad
SHA1 75593989dc35c05b9c7491960de07c34e9852c4b
SHA512 e00ee98aaaaabc54d27c0991dd04a56435413eaf3f4e001f70e6d282bf0c724346a7bac1a0ecab2a1a0a88e6cb93d58d3707c369e0dbdf48b05ea1014a66202f
MD5 SHA1 SHA512

Submit Download

xciptv.db-shm

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

xciptv.db-wal

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db-wal
Size 40KB
SHA256 3be2359d3b13dbcd28e9feaff7ace135761b3bbe1db799bc8f41126233cefa8d
MD5 6bcdd831d84876ed22b6e09d2a365345
SHA1 fb36de37ef635e811804f54b91f9f90098d61881
SHA512 354aa6ec28036f887288ae2d6c8b656dd0b3632fc7bc08b08b6543f4338dab8e25ccffa5d0191cb35e5a73383a76858b50ef385a8f0387340cbedfc45b02d73d
SSDEEP 48:UyzNSP/BJlansEPwKp7ABAH+60SP/Nlo:N0PZLYIKp7+iPFlo
TLSH
T10703ACD3C3001B23CD0A03B0DCAA43532DB3AA8FDB5287D735BA94149C43E88A4A2D28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xciptv.db-wal

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db-wal
Size 8KB
SHA256 5f8b00378f129c3383a847c1e24deba24cb76651756a4d4c7bf7d88eac996952
MD5 091382589aa3ca7352a424f549d734c7
SHA1 9921663f382910ba08aa03e4faec1e834471c5c3
SHA512 546b38cba348af74df8fc89fc756ab563d48a8618e551d3e1d6ed8f7f8db4d51559e65ab6d8beb741975edfd909e956423de8e099bc310a9a6287558a33fa9b1
SSDEEP 3:OlH/lR2DPdy//z4R2WCzuEysoNllSllWCzDa+2/F4o/lfll:KqDPdycR2WCzUQlWCzY/
TLSH
T1690201ED54CA963DC04EE6F0883A60592DE331D968D6A99632C19882C49EA5314A0F2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xciptv.db-wal

Path /data/data/com.nathnetwork.bluenow/databases/xciptv.db-wal
Size 8KB
SHA256 8ac1673cee4de669f395f03afb9d2349ae0cbf8e4c6ab40193e9697144764e10
MD5 c03cf7ade2e01fe172e72734138f706c
SHA1 45010bf5d2b35801fc376341043d534c642176f0
SHA512 f74a6bc89a0e56260fc84ac15978c13fa2c0901a5aac314a11e948f1a0ae6187a1076dc17f3278f0b33b3df64a0995028851f4b15e19efbfa7866cb65ba57bae
SSDEEP 3:OlH/lPuidY+Czqm0EP/FllSlX0RY1BWZll:K8idY+Gqm0E4X0+m
TLSH
T1E202016048248EF0F76E21F4C869036DA5E08AD938CF059906A23D51633469A95A399D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xciptv.log

Path /data/data/com.nathnetwork.bluenow/xciptv.log
Size 313B
SHA256 23e41ce5f5addc37ad152ea5450d84dfe28651df0b2a2d870ca77d88404e1018
MD5 db9760beff61907834eceb71fb71c9fa
SHA1 8afd76492bc405f23a20f76960cfd7aa3ef89d3c
SHA512 1d5c281704ab095b8a4cc7827c516677b20a27536af0c72796ba6a697ac43b80024a4341a4e1729ec37a032958823586fea0b4720181a96f0893fca7f9530859
TLSH
T13CE0CD4E6C9C05515087C97659D8A369F4A59C1FC6355C525455E24D1810C59CB8D541
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads