aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe | Triage™

Login
Reports

Overview

overview

7

Static

static

6

XuperTv-N0...AL.apk

android-13-x64

7

XuperTv-N0...AL.apk

android-15-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk
Size 32.2MB
Sample260804-gm2cvssdle
SHA256 aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe
MD5 f37a6921a54aed81a93ecbfaac40f747
SHA1 56d7fcb6579e7c49829b83567923aec85d22f745
SHA512 25fa77072e3a010893b17bf63b93357163d4d1f02eaa8461d18e08848f56c022b192dd5644159fd22e146a235f3a3a136c6d418460295444be48fc3e301763a7
SSDEEP 786432:myzkNjjaRrH9p8lypAAlEZG1jiC8KgUC8zHtPFno:9zk0R79p8ly+bZG1N7gUCIt9no
TLSH
T14577235BF708E457C0F7A7328AB91612451B0D614B43E29B6D18F27D2AF36C4DE4ABC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android collection credential_access defense_evasion discovery impact

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk

Resource

android-33-x64-arm64-20260708-en

android-13-x64

5 signatures

150 seconds

collection credential_access discovery impact

Behavioral task

behavioral2

Sample

XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk

Resource

android-35-x64-arm64-20260325-en

android-15-x64

3 signatures

150 seconds

defense_evasion impact

Malware Config

Targets

- Target
  XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk
- Size 32.2MB
- SHA256 aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe
- MD5 f37a6921a54aed81a93ecbfaac40f747
- SHA1 56d7fcb6579e7c49829b83567923aec85d22f745
- SHA512 25fa77072e3a010893b17bf63b93357163d4d1f02eaa8461d18e08848f56c022b192dd5644159fd22e146a235f3a3a136c6d418460295444be48fc3e301763a7
- SSDEEP 786432:myzkNjjaRrH9p8lypAAlEZG1jiC8KgUC8zHtPFno:9zk0R79p8ly+bZG1N7gUCIt9no
- TLSH
  T14577235BF708E457C0F7A7328AB91612451B0D614B43E29B6D18F27D2AF36C4DE4ABC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access discovery impact defense_evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Checks the presence of a debugger
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

collectioncredential_accessdiscoveryimpact

behavioral2

defense_evasionimpact

© 2018-2026

Terms | Privacy