General
- Target CinePlus-v1.0.1.apk
- Size 14.6MB
- Sample260705-ws9zhsaw2m
- SHA256 48d48c1d80a7e93a1f2da981f99fe87fdc8984176eedfd5f5911e2e445cb780f
- MD5 c88992e9b17141a622c023dcad2c0c5c
- SHA1 f477228830b11f21d765218c35f6c51f16587b27
- SHA512 23103d058215747c227422831270a2e31118b6060220e490644035aebba40263f97730e321036d5f6943b8d55b6884efbe1ae5d051f6989f0e339c3b2047a349
- SSDEEP 393216:WrXa2l0yzRWoj7kJulgGv4tOlBZSF4WBjHoC1ZJ:WLTn9/V9vMOQFfHoqr
- TLSH T188F62297F7285D2ECC7341724D5A4231662A8E95CE43978B3A58372D6CB36E80F48BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
CinePlus-v1.0.1.apk
Resource
android-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target CinePlus-v1.0.1.apk
- Size 14.6MB
- SHA256 48d48c1d80a7e93a1f2da981f99fe87fdc8984176eedfd5f5911e2e445cb780f
- MD5 c88992e9b17141a622c023dcad2c0c5c
- SHA1 f477228830b11f21d765218c35f6c51f16587b27
- SHA512 23103d058215747c227422831270a2e31118b6060220e490644035aebba40263f97730e321036d5f6943b8d55b6884efbe1ae5d051f6989f0e339c3b2047a349
- SSDEEP 393216:WrXa2l0yzRWoj7kJulgGv4tOlBZSF4WBjHoC1ZJ:WLTn9/V9vMOQFfHoqr
- TLSH T188F62297F7285D2ECC7341724D5A4231662A8E95CE43978B3A58372D6CB36E80F48BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Checks the presence of a debugger
-
Probable phishing domain