aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe

Analysis

max time kernel
149s
max time network
156s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
04/08/2026, 05:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk
Size 32.2MB
Sample260804-gm2cvssdle
SHA256 aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe
MD5 f37a6921a54aed81a93ecbfaac40f747
SHA1 56d7fcb6579e7c49829b83567923aec85d22f745
SHA512 25fa77072e3a010893b17bf63b93357163d4d1f02eaa8461d18e08848f56c022b192dd5644159fd22e146a235f3a3a136c6d418460295444be48fc3e301763a7
SSDEEP 786432:myzkNjjaRrH9p8lypAAlEZG1jiC8KgUC8zHtPFno:9zk0R79p8ly+bZG1N7gUCIt9no
TLSH
T14577235BF708E457C0F7A7328AB91612451B0D614B43E29B6D18F27D2AF36C4DE4ABC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion impact

Malware Config

Signatures

Checks the presence of a debugger
defense_evasion

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.android.mgstxNF

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.mgstxNF

com.android.mgstxNF
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:3355

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

base.3355.tmp

Path /data/data/com.android.mgstxNF/cache/oat_primary/x86_64/base.3355.tmp
Size 426KB
SHA256 7b38856771232df6a48c6c3bda1423690eaa3ce999d1b51ce28eb04e8b3f44be
MD5 0b95d2e75f32ab475c9b96c2a1cc74d0
SHA1 2dc88d4c8126226956400419e8399aa4a1f62b04
SHA512 e8270d58ea246264d4e08b49762a914917461f5fd46e5918d7c509bcd92d2baba3c2dbaef7a1db9604975b1ed8c2d76f09077f619f8ef907ce22082ad59f2e54
SSDEEP 6144:WDGGnpPMoI4PSnru77TSPLDdKzQ4cuX+AaE/B/Ca5qsg6jsyQBITaWtrVKS:W6GFMEKS7vSPLd4cfM1qsJQsttx
TLSH
T1E7944C5FB9235050C4AABFF69B4A46ECED69C021124B2D14A4B2737EE433F24D761FA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addb

Path /data/data/com.android.mgstxNF/databases/addb
Size 20KB
SHA256 b67b55df4b970ab834f9ef6539e58337243e4d7c13ad8775babb586d0f40709b
MD5 bc7948e0c47675d5c3f47de00d96f82b
SHA1 3e4037b234c4ef266a991a873dc7ff14fe7507b3
SHA512 c515f2757e9da3ac4b50fd7ed29cfe7f2c065920ef65b95639a0b6d3c9ed42a8fd3495f8101793347fb718c48e34ece2989cd364cc0295954d7d929a06e9457a
SSDEEP 12:TLekyNTSFbyB5m/rWKEcNAZlgcWS9MZJ95EcRmBEyPbAVOwG:TLexy5CgX28lEnGSEG
TLSH
T1AC9246C74701B321C2B98671A8B583E35AF0123FC2E0CA9764B86C349CA190A34A9E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addb-journal

Path /data/data/com.android.mgstxNF/databases/addb-journal
Size 512B
SHA256 c5c487dc8d8ad31d6be4c93dea8f91641de41224c4264905610f57c5d9a7c7d9
MD5 9fc9cb740c89f79f73ccb9988bbc242d
SHA1 19a77fcf91516e90514d0f56a63531aa056c751c
SHA512 2510aad96e7c48ff442780a9c65fc8e3e99538e00c763c746d21908958772eac8f7adad94526ab679f40e2a3743fdf9ed6214c274b2cf2d0f7c0cb277dc8a9b5
MD5 SHA1 SHA512

Submit Download

addb-journal

Path /data/data/com.android.mgstxNF/databases/addb-journal
Size 8KB
SHA256 2d6a26739aa109c9b675c38cab02b827bc6cc0d641c62613c3c7dd762e856374
MD5 b88627bdefc44e05adf51cc96d689866
SHA1 a745153e8c9182b457cb50a52496f4216a923821
SHA512 ec0a87d4ff91eaf9438d18b0fcd5d196c8093bcf0eb36ef9bf63c6eeca9e530c9ead23c9f4a8204345d2857bf79d7c6ee7971b625b9cc704722a38d5684c54ec
SSDEEP 6:7+/l9mn1Bg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuK6n:7+tsqLiuWdQoRmBEyPbdn
TLSH
T12C02228867800832C81D1677D0D483580E10A7188A61CBE729D008D4AC074CCB8A0E08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addb-journal

Path /data/data/com.android.mgstxNF/databases/addb-journal
Size 8KB
SHA256 e5de9265197ca966100793f42b317319d2107750bf5149309a4ac2c9af499986
MD5 2aedcdc91b30ed1d79330356ee828f20
SHA1 33c156fa6b3e0c2f67ccbe157838e906eada8293
SHA512 25b7c3e8fe452216afdc37431911f6048c20791813fe15aab63f90f0fef4bb0fed54a1c0ba7f0f3bea08686c58507a43ac499927d8ddebc601ebb43bb0c8fde2
SSDEEP 6:7+/l9ty7uHPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuK2b//o:7+ta7uvqLJdvloRmBEyPbHbXo
TLSH
T19702228D67401803C0191BBB90C883683E24AB189363CB0715500A942C02ACCEC98F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

okgo.db

Path /data/data/com.android.mgstxNF/databases/okgo.db
Size 44KB
SHA256 08f5fc895017b4bb21ad0770f1de7d247b4708c11e3af5bc521fc25832fdb90b
MD5 96f251ad745836090f5e037798d4551e
SHA1 ef91d5e7d134fab0c87ffa039a8602e7f11cf23f
SHA512 67fe9d24b15fb9cb0d79d4e160dfdfba0b03939e1fa281df1d8e98124bd18f7591d30dd30cdf239e38f7d504ace5109721f4fc0c3c2276648957d9c37c453564
SSDEEP 24:TLVlOGoTwufmcyZQk1TwufmU9COSgIU4pAXGS+Iee:TcjyZQIhIU4A2S
TLSH
T182137C5A2B381430CE1D127258C047B00E7AA77F4B97DB073CE120B5ACAA055AC2ECBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

okgo.db-journal

Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
Size 512B
SHA256 04e28788ebf64b928a81552312f6863f47394a3696611a86c05e7b23104e76af
MD5 3a2dc54975c357b70dd97d33b1801402
SHA1 6c0433110b2d724e25c41645f5808f1b43674d8b
SHA512 005027e9b6a4f922c745944cfb6de781a1e8027d01ce83c910764c56df76d1af8c4ea47271c0bd3baf6fc2deb9741848ce48483e122039517e0a5c2972ce1423
MD5 SHA1 SHA512

Submit Download

okgo.db-journal

Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
Size 8KB
SHA256 fe4fe3d15caacf873368afa4206ffe3d511fcf56eeca690ed4452e6907abc20b
MD5 acb8e8fdcb91797b939ae4e68b99ef3f
SHA1 5230a3cc6fe427ba795a7b6d603afaf979efc14c
SHA512 ee5b09ed563d2a779498360a144832e2e821ca4732860a6e6ef03fc22e9e5047733375286ebb860bcc39d6eea6c291320d96c0c5efe83a34e7a24f9aa5878d03
SSDEEP 6:7+/l9/cn1Acxvg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKkpn:7+td5sqLiuWdQoRmBEyPbb
TLSH
T1940222986BC20913C8192A7790E483580F10A7188161CF070A5008986C0F4CCA8A0E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

okgo.db-journal

Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
Size 8KB
SHA256 01d4c1045ab820e7c32930a7a57126e75d90d9a2f28003adf4d22f681f4a4076
MD5 39ffb7c093e7b344f49313dfc4eb389c
SHA1 90ba90ae5975d1c95a0430b18518622653e253fe
SHA512 09fe85a515366ef89e998ac27e2ae15c60424eadc3f1af9ff001372c83d25f2b67e109fabc8c5955ec9f4ea7e19bae7f113bacf423b274f3aac7569c6bbeaa11
SSDEEP 6:7+/l9pPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKIMU/y:7+tHqLJdvloRmBEyPbJy
TLSH
T1DA022288A7420C03D01D177790CC83581F10A71C8363CB17155008582C0A6CCACA0E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads