Analysis
- user interaction
yes - max time kernel
20s - max time network
33s - platform
android-13_x64 - resource
android-33-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system - submitted
27/05/2026, 05:10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Blade UHD vMOD.apk
Resource
android-x86-arm-20260325-en
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
Blade UHD vMOD.apk
Resource
android-33-x64-arm64-20260325-en
1 signatures
600 seconds
General
- Target Blade UHD vMOD.apk
- Size 72.9MB
- Sample260527-ft47naft3m
- SHA256 21adfc4ae484365c58f7c67ecf4db09978cd554712a72b3b9bc6158d7d57cf10
- MD5 65cb9b715af5be02d27875cdef79f301
- SHA1 76e867c1eb6e7c492fa3ab15f2cb954607460ad2
- SHA512 93a388cc669ef979eea3f6d0792d13fd46b87d9c1289c0a03edba5b87f9202462dac9da462f2aac5faa6f2cc4299197f0f0bcb788472237e25c18db0f6905012
- SSDEEP 1572864:91WJpc6lAFMkSWjyxsfTUz0/V2uFcdLxogUFYIidfaMUzYhQB:nwceFuasfTUzg6dLq6HdfaMUT
- TLSH T1F4F73383F7A8985AC0F3C37189B10662129B5C648F43EA97791EB37C47B79E05E85EC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.nathnetwork.bluenow
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.nathnetwork.bluenow/xciptv.log
- Size 329B
- SHA256 c1e33c554119d13d1f5cb2ec4e3ac190c2cfd7d8417b24c271af4bf2737d45eb
- MD5 5aee472f0c646e7e8bc22403d80ec924
- SHA1 1a1b97158247cce3d007ab475ba03d65a2508668
- SHA512 b3f9cbe9ab3b16caa002fbe97411c29d4a56ff695f59323b0b2838c351fdc0f3bed5bdf24ef6cd6be1425d484d46808745857c33791be990fedd59779c549fcd
- TLSH T17BE07D4EBC4C04110087C9766AD8E228F0E6AC1FC7294C456051E54D0C0089ECB8DA50
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db
- Size 28KB
- SHA256 f7a2d09cb3a3828fb7d6a31f906d1edf4ddef56bd08d6b090e795364607a0527
- MD5 2ea1f8825bd709d0eccfa53c628a1237
- SHA1 22871f0fda7073d76075aaf1debd0b951015a7ce
- SHA512 03ba316945b325b4a65b451fab45e3b89ece9d2ec888bfbc0fba6b5b8a3ee767960e0a9785710b486c613d48d39fae796146a28e851a033ecdd3fb3ffaed7f3e
- SSDEEP 24:TLGMnsm25udxyO5uKLqYhFABAHQ/ox9rIiGSiGQQ:TqMnsEPwKp7ABAH+60S
- TLSH T174D289E386141B37C9084070DCA853925DB49E4FCD92479235BB8404DD93C99E8A2D39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db
- Size 20KB
- SHA256 a208e9673ac4a9ed8cd9cdb4a46533b44d2364f2d3db05efcb5651cba8628df3
- MD5 b85ed71c660a51a207bd088fcc61b058
- SHA1 847f60c16d27fbcdf6b5e55b1459a626b70b2c7b
- SHA512 f7a7abed411ca969b40ad00f419cbd57d0d1aa858de5d2b840eab2d7330d3392151906af664c3d7a4a75311e43a7abaf6b2d2e3f18613d0fe928a954b7bb964f
- SSDEEP 24:TLg3insm25udxyO5uKLqYhFABAHQ/ox9rIiGSP/WQ:TM3insEPwKp7ABAH+60SP/
- TLSH T103929CE3C6141737C9444470DCA812935CB49E0FCD5247A136FB8404DD93C99E4A2E35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db-journal
- Size 512B
- SHA256 fdeb983c1326ac2bb2f5dcaad72388a3a3fb0ba9e593ba684cef0de09bb74460
- MD5 fa04a048f4cd1c5f29fbdb768830ae2b
- SHA1 68c4b3a012e2590fffd248f8d01a6187400f9f9f
- SHA512 7a78f32bcca0cef7d68facc3399766cd2081a19f555f0d229176ad17111a77f6d34594345821fa8b621fd0051c893b8df1753a8c78d1bec463879788b559cbd8
- MD5 SHA1 SHA512
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db-journal
- Size 8KB
- SHA256 2ef39c8de84334b953f1d8577415a765aef7bddfbe4c41c3bc60aa9685d76265
- MD5 98933f4e0c13818d00abe0bfdafd30d2
- SHA1 39618964932b91de41a87d25f5a7a0f42e16da55
- SHA512 2ee389b027ddfe4bdd14a4e3a58aa67c8057fed2ee2f1cd3736c6c232719868ff6ee44451ff3d75e5e5c05528313f38b58d56e184c7a2c80da1a887b721e9d56
- SSDEEP 6:7+/l9suHn1NWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK6C:7+tZWqLiuWd7RmBEyPbLC
- TLSH T13002C0AC67800923C91D767794F483680D00EF38C372CB174552089A7C035CCFCA0D4C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db-journal
- Size 8KB
- SHA256 3b75b9456c64e67282c64a32eb5e8abb012a45430ebcb2106c3d3db19ac7cfc6
- MD5 454583d54b31683b03a9852619177641
- SHA1 d08f8b5845b445f7a3b05aa775d5f9d427b19196
- SHA512 2f98cb550b298c438d678039621b7c2e11b2eb734e79444af68e4c7724b846139a7913cbc5f8da220e3240b80b03bf522248068bf3a5886e9fb140517e76183d
- SSDEEP 6:7+/l9HsPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKiM/0o:7+tl0qLJdKBRmBEyPbts0o
- TLSH T1920212ADA7412953C52D57B7D0D983581E10AB15C363CB5B55500954EC476DCE890E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db-journal
- Size 8KB
- SHA256 7f624d1d3b09cd6763da8cf52fe66457f4eedd6daf5e881314bb993415eeae5e
- MD5 5ac41ea5cda51675a6b6048d1887244d
- SHA1 e47cc8ca2fd6a1084912e0fe12309038c08f126b
- SHA512 c598f7ad3d34e5dbcec0bfbfe3e30a7786787cdcf3189ac8e3091c0b47c0fa71181c2dc4782b0c341d1c85be9aa3099e9ed2104b9b2e988af5f348fecd0e0362
- SSDEEP 24:7+tjpqLGMnsm25udxyO5uKLqYhFABAHQ/ox9rIiGS+9:7MjpqqMnsEPwKp7ABAH+60S+9
- TLSH T1E8026DE785241B37C5454474DCA802536CB49F0FDD9247A635FB8504DD53C96E4A2E35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.nathnetwork.bluenow/databases/xciptv.db-journal
- Size 8KB
- SHA256 7f43cb1d7a97f1104855e580a8f04d7683b58a9d07b887014483bed024dc3e07
- MD5 1b76d31e6306eac849d21a6816381fea
- SHA1 375c6c95aaaea1e3cfc39009f0821f97f506b89d
- SHA512 ecb71ba6abca8c81df53afd32c1db8dde5f227bea5048eb16debd9a142cb7b720968fa525a6abc8c816ff3339aea79e582243586793a66c846f0fff9b4b0c397
- SSDEEP 24:7+tWqLES/nsm25udxyO5uKLqYhFABAHQ/ox9rIiGS3:7MWqoS/nsEPwKp7ABAH+60S3
- TLSH T1BD0268E786241B37C9454571DCA802936CB49E0FDD9247A13AFB8404DD93C9AE4A2A3A
- MD5 SHA1 SHA512 SSDEEP TLSH