aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe

Analysis

max time kernel
299s
max time network
286s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-es
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-eslocale:es-esos:android-14-x64system
submitted
04/08/2026, 03:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk
Size 32.2MB
Sample260804-d3anasvvay
SHA256 aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe
MD5 f37a6921a54aed81a93ecbfaac40f747
SHA1 56d7fcb6579e7c49829b83567923aec85d22f745
SHA512 25fa77072e3a010893b17bf63b93357163d4d1f02eaa8461d18e08848f56c022b192dd5644159fd22e146a235f3a3a136c6d418460295444be48fc3e301763a7
SSDEEP 786432:myzkNjjaRrH9p8lypAAlEZG1jiC8KgUC8zHtPFno:9zk0R79p8ly+bZG1N7gUCIt9no
TLSH
T14577235BF708E457C0F7A7328AB91612451B0D614B43E29B6D18F27D2AF36C4DE4ABC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion impact

Malware Config

Signatures

Checks the presence of a debugger
defense_evasion

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.android.mgstxNF

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.mgstxNF

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.mgstxNF

com.android.mgstxNF
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4650

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

base.4650.tmp

Path /data/data/com.android.mgstxNF/cache/oat_primary/x86_64/base.4650.tmp
Size 428KB
SHA256 38714daf5e9c7ae8c872c2e5ef91b3a2ec77cdb7cac6f42b095e0082e7e9e751
MD5 85b102d67bc8a7e9d8ca76090409a724
SHA1 3b822fe08fc7f9f48a35f8e57e2d698c3620919d
SHA512 5c2938ea8d570b2d9c90cf2e743e034a0e874de85f3f8070fe4a2db025cb93ba54070916f6ac1b494950fd671ab0b0f75d3065f8441dc7543b74418e3798cba5
SSDEEP 6144:Uws9YwR8ymrmU5q4gSIQScywk6TccOPfGvjCvF/QGPY/thy5rw5PHYajZxw/sLo:TUYwRn/ncyKbMUnPHY+Zx6W
TLSH
T180943B9FBA224150C69ABFF5DA8606F8EE65C02116573C14D4B2A33EE433F24DB61F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addb

Path /data/data/com.android.mgstxNF/databases/addb
Size 20KB
SHA256 e694c36fcb8aa529a6ddbf539d048b0715869657a54c551fcc742cec7a14b4f5
MD5 c025afa03ab7af1e4f4d55482088b39f
SHA1 68b778b8f31cf829422d4ba4addc3e58612890dd
SHA512 8882a42f7662af9f7995b925fe58bf597536d25066a565c8788717ce502e6dc1bca1a4ecab1671f04056bfec3e0ac0caeb4e68c3c6144062ef94edfa087a2f24
SSDEEP 12:TL9yNTSFbyB5m/rWKEcNAZlgcWS9MZJ95EcRmBEyPbAVN:TLwy5CgX28lEnGSg
TLSH
T18C9246878701B322C2B98672A87583D35FB0523FD2E0CA9724B85C309CA190B30A9E1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addb-journal

Path /data/data/com.android.mgstxNF/databases/addb-journal
Size 512B
SHA256 7ca1556445e1ac376b8b8295d514e0cdb0c8d6221ea0023c63acd6db8959e6c8
MD5 6e62e789ffc1b44164026de8a8e7e20a
SHA1 b161031bb4f92884bdc11b721779f97b52cec6d0
SHA512 2315271033716d7bd9779485e2effc8f2bac030f84155fb419d355fd2a124e5aaf5014931097ead39366c7b75556205e8944ba9c5f01875002c7f04e23da4b4e
MD5 SHA1 SHA512

Submit Download

addb-journal

Path /data/data/com.android.mgstxNF/databases/addb-journal
Size 8KB
SHA256 a2890429bdaaad2c64b4f7ef7b7ad6fcb0360e4366b837f2eda16e8b5060ffa3
MD5 0a58894bcd73bc41035c54da93b63b06
SHA1 5dea0498728b9d011a5afaa3857d6f1de98b5fa9
SHA512 bafcac7fbf90eaeeb16784f434ac0a8f8ba732a437fccada8b067deea3e3a3e0eacb0029920c874966a685ad4380eb0204ae26217eba413c4af758802fd19109
SSDEEP 6:7+/l9k2n1Yvg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKd:7+tMvqLiuWdxBRmBEyPbu
TLSH
T1820222ACA3C00823C91D1ABB90D983540F00A7188779CBC7057008A86C0B4CCA4A0D98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addb-journal

Path /data/data/com.android.mgstxNF/databases/addb-journal
Size 8KB
SHA256 3e1674b032b294572079c6926f116ea8b2c019c5939bd6807260fd392ab40c10
MD5 e6ed202fa889425d83dc12f3dfe45f67
SHA1 e109e3a9b90b18f24b11a90de50c659a3f245fb6
SHA512 45b5b8239e1bf9879a615e51ea21905954035518d4a4535dd66126ace953043364d8409460d9ac0c894f5c497a80fc23fd1fbadeaf40500edbf5cacee927a030
SSDEEP 6:7+/l9LdPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKB0//K:7+tp5qLJdIRmBEyPbE0K
TLSH
T149022288A3800803C8AA97B790DA83D03E10E71682B3CB070A5008542D026CDA890E24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

okgo.db

Path /data/data/com.android.mgstxNF/databases/okgo.db
Size 44KB
SHA256 446c5f266ddb99ed29a58fad210f16a2a93a821b33a9c81df7229bf5cb7345a7
MD5 f8e5d7d2e002cd641ab2b942b2224739
SHA1 c27e4bd37b0806fa3f2c191a0a7232584f24e247
SHA512 7dad4ca2002b100dbb32c7b2fc6df5c4c0b9918930855e4f053450871d59323358e853d6bce84b932fc433fd5c0cd306e2ad54062894648be37e159908950f89
SSDEEP 24:TLVl/oGoTwufmcyZQk1TwufmU9COSgIU4pAXGSsee:TijyZQIhIU4A2S
TLSH
T142137C5A2B384430CE5D127258C046B00E7AA77F4F97DB073CE120B5ACAA055AC2ECBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

okgo.db-journal

Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
Size 512B
SHA256 b66f40ccc2987a701b7e3a04fcb4dd2c063d0ca7318290cbd5e529e60bf605ef
MD5 98b43581a2c6a383fc1f8f25b41c68e7
SHA1 07b9f4ad6ecc07320ca3b20a6106fe0441070005
SHA512 4c58886c40030966119db101cb5c620550f4b88d8346810d33ae5e2157647e799737b67bb0dcf35ced0bd1484b7da54d3c94b95eb9489cf4df75312f96bf757c
MD5 SHA1 SHA512

Submit Download

okgo.db-journal

Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
Size 8KB
SHA256 1b2a9dda8d41189ca670cd08b2bfb1e0b828eaf4d4c7efe34c5486a508841bb7
MD5 5a4b4f9b0733304bc89c4d15aed699f2
SHA1 b7a11a159b41492a74bda4c390366a65ce8d8712
SHA512 d60acce08330af872bd87b29082ba8b4a052687a7746ab1a11fce57b3fe52c2477246a3133220205fc6688761c58a996b194d9e5428f5f764d02195665572e8a
SSDEEP 6:7+/l9jlGn1hpg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKo:7+twqLiuWdxBRmBEyPbH
TLSH
T1C102229CA3808812C8792EB7A8D483440E04A7288171CB07866008982C434CEF4B8D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

okgo.db-journal

Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
Size 8KB
SHA256 97aac74f814d3d80e31ff84a44788c48799242573a8ad654132446f3fae4b11f
MD5 232fbae75a72fe656224567201f5b32b
SHA1 405c01cfe603bfb8e664653ace4e317d0eac8585
SHA512 48737bc61d13599c339c836ccf4899a42f3c95f81753ebf3dde7051a00bc2a26a8a5898e7702f812c33ddb4f80f53698baee375294a05d14a4224770c12f2329
SSDEEP 6:7+/l9GPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKy3I/3:7+t4qLJdIRmBEyPbD3I3
TLSH
T182022288A7400803C119577B90C8C3501E10A714C233CB4B05510C547C06ACCACB0E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads