Analysis
- max time kernel
149s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-es - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-eslocale:es-esos:android-11-x64system - submitted
04/08/2026, 15:33
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk
Resource
android-x64-arm64-20260325-es
4 signatures
150 seconds
General
- Target XuperTv-N0F4C3-v4.34.7-NF-OFICIAL.apk
- Size 32.2MB
- Sample260804-sy682ahn3s
- SHA256 aa6cfd811f105ab2230449bdaaaf506a0bc003ea52a71eb933e36e744ebccdfe
- MD5 f37a6921a54aed81a93ecbfaac40f747
- SHA1 56d7fcb6579e7c49829b83567923aec85d22f745
- SHA512 25fa77072e3a010893b17bf63b93357163d4d1f02eaa8461d18e08848f56c022b192dd5644159fd22e146a235f3a3a136c6d418460295444be48fc3e301763a7
- SSDEEP 786432:myzkNjjaRrH9p8lypAAlEZG1jiC8KgUC8zHtPFno:9zk0R79p8ly+bZG1N7gUCIt9no
- TLSH T14577235BF708E457C0F7A7328AB91612451B0D614B43E29B6D18F27D2AF36C4DE4ABC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Checks the presence of a debugger
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.android.mgstxNF - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.mgstxNF - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.mgstxNF
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.android.mgstxNF/databases/addb
- Size 20KB
- SHA256 8ee119fc5ee5cd1b14f139e200d6f19d89391d809a7edbbdee0a73f71f95b5ee
- MD5 c5642d066fec990b2b1f59a5f7fa7a66
- SHA1 c49f2509fcdd216d2e1223bd80883d689f49af45
- SHA512 74193ac348a6971773c5492a22ace0452af90d414ee0b859f51cd31db4f3177eb7b1856811402959c97f3ab5139cc4ef2e0f4ce4ffa938d655b7410ae5b2e0d3
- SSDEEP 12:TLelyNTSFbyB5m/rWKEcNAZlgcWS9MZJ95EcRmBEyPbAVN:TLeYy5CgX28lEnGSg
- TLSH T1DF9246874301B322C2B98672A87583D35AB0523FD2E0CA9724B85C309CA194A30A9E1C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.android.mgstxNF/databases/addb-journal
- Size 512B
- SHA256 d76bedd436e07692019da9b4be44667db55cb720db0836d6473bcb0c6a2a4050
- MD5 c6dbca1a12e53981fe837930b93f67c6
- SHA1 335842ef5404fb0118b72a36f444344392b9546c
- SHA512 3c3227e608d21319dcdf2f0c59a6fafbbc5c704abfe21570052dbfe6ec5d339ddc9d8bc1a32d77a12637500b78bffcd239f71ded03635f6ee4d000159fe3ea61
- MD5 SHA1 SHA512
- Path /data/data/com.android.mgstxNF/databases/addb-journal
- Size 8KB
- SHA256 28d02b69821f2122ea9b92db9eb376ba9582e62ed24ae7add474cee1b6d242e4
- MD5 0e12deba0217365f4b3334a7be58cfb7
- SHA1 46139942b81ee1b7c3c89ce82e4542921d652d65
- SHA512 eaaa9d51b6f6719219ebb968d0a790a0dd272ca0005bc531dfb24234e31038d6d77f9bc23be793df9cce0c4cb346bb43217540fd59feeeda619a9b95701b1f0b
- SSDEEP 6:7+/l9Xgn1nll/vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKA:7+tR+/nqLiuWdYRmBEyPbr
- TLSH T1CC02228AA3812823C82D3A77A0F483580D20A7289262CB17169008942C474CCE4E0D94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.android.mgstxNF/databases/addb-journal
- Size 8KB
- SHA256 47516a627b1d138ccdba670a922563a6b210674f6782534d8a773416ff1d2715
- MD5 55333783adc95c18a7a227691741783d
- SHA1 0445a5ce33c0eb43a28ad39cebc08c057fe275be
- SHA512 509510c39ad2e08b35b243640d6e4885b24153b63b9d0f7205ed55e5224e7605b0fab9fe51512ccc5515897899f7065af0e96751e204cede291a3e943c66d432
- SSDEEP 6:7+/l9pcmHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKyTYts//in:7+tzvqLJdeWRmBEyPbDTNi
- TLSH T1AB02808967410A13C53D5777B0DDC3541E14E76A9373CB9B16D108B4BC476CCE8D0D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.android.mgstxNF/databases/okgo.db
- Size 44KB
- SHA256 9fa6f23b38e6517980d28eaabd21c45db265881db5c740a6d45051aa51c9b762
- MD5 fc51b0bbe50d6f140e8223f3c55b7a28
- SHA1 d727cb42a26ddbcec77a6afe0de30445deab1faa
- SHA512 f9995206db19f6a67f67f2f62d0f824732fd1b4538481ec30b62277eb77e720446e28b55005fa86a5b2151200cc1c321463be9d8ba2adb92ba3890d62cbb2875
- SSDEEP 24:TLVlfGoTwufmcyZQk1TwufmU9COSgIU4pAXGSsee:TrjyZQIhIU4A2S
- TLSH T106137C5A2B380430CE1D127258C047B00E7AA77F4F97DB073CE120B5ACAA055AC2ECBE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
- Size 512B
- SHA256 c275de352db0436501b926750b6d48e023141c7a180f1ca17f5b7cb272d2d00c
- MD5 8068cc4ba8500e1e91d2a69c03911222
- SHA1 60a4a7888766d27b1d8af5f514eb3e12e375b923
- SHA512 03db630caf8c629108b203ea9b07f8a4c0ba546ae9e615f36f0171c527a09d3620c055c18636d2ea99235e04dfce102d7cd8a946488c3c4af347702cefae0bfd
- MD5 SHA1 SHA512
- Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
- Size 8KB
- SHA256 4cc004df3ce1f66454581a6244558707cda41c69d4d51c56848679d4c98f31ec
- MD5 f1709bf72d972b31067b09291aac3eb7
- SHA1 924bd2e7f8c61ed8619062d25490c2261d6c1a3d
- SHA512 0cd8b888d76103715162639ca2de4ea493258ce92551ce6ff7e814a5f04b2aa5df387af643e26c70754defe990aa7fd60f00049da54578cd1f895a0c461d679e
- SSDEEP 6:7+/l9iY8Hn1aY+2vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK8:7+tkb1vqLiuWdYRmBEyPb7
- TLSH T1FB02C08C73C00833C82D16BB98D883410D00EB2C81B1CB2716920C943C074CCF4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.android.mgstxNF/databases/okgo.db-journal
- Size 8KB
- SHA256 b93056687cb0c74703d0caf11dc45f301c93ff61060a1ebdf53c2bb94dc7c1d8
- MD5 3848a0f39ab2e86acb17b74a8068aa6d
- SHA1 194d0c81a7181ec66feadd01851db6f507a8c332
- SHA512 3b2b09289ecfe0e2dd519073c7157f44eef4d890161d7cf257a692a061a0b26b4a74c23aafd20d5b4d873006c7bddac28486db4f93b4fb69b727df48faf1d0bf
- SSDEEP 6:7+/l9DJgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKus//v:7+thJ4qLJdeWRmBEyPbLsXv
- TLSH T10002228867400803C4291BB7A4D883421F30EF2C9223CB07169109543C066DCA890D80
- MD5 SHA1 SHA512 SSDEEP TLSH