Analysis

  • user interaction
    yes
  • max time kernel
    82s
  • max time network
    95s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    10/09/2026, 23:24

General

  • Target
    Cineplex Alert_0.3.0.apk
  • Size 100.6MB
  • Sample260910-3dzzbsxdkd
  • SHA256 ea90b9a720cc1054557956bc46beda4fc4754dddf61cf71fe93b711171115b8a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.cineplexalert.moviealert
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Checks memory information
    PID:4777

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ExponentAsset-b4eb097d35f44ed943676fd56f6bdc51.ttf

        • Path /data/data/com.cineplexalert.moviealert/cache/ExponentAsset-b4eb097d35f44ed943676fd56f6bdc51.ttf
        • Size 380KB
        • SHA256 fa2ab7d2557819b2bfe5009e46844efa7170cf177be7735d43aa2ac1295f1d54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RKStorage

        • Path /data/data/com.cineplexalert.moviealert/databases/RKStorage
        • Size 20KB
        • SHA256 704233dafba4656ab33283b8f1952ad2b2ce981f2bf829242922f863b1e4dee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RKStorage-journal

        • Path /data/data/com.cineplexalert.moviealert/databases/RKStorage-journal
        • Size 512B
        • SHA256 8dc1a1d529a43fbd474ea011d56feffd26b3bd5e98bbf1eb18b35556a7d54f68
        • MD5 SHA1 SHA512

        RKStorage-journal

        • Path /data/data/com.cineplexalert.moviealert/databases/RKStorage-journal
        • Size 8KB
        • SHA256 db91650a84d3eb1f79ecdab07ca71659454de27cf312c0892f6b2db311054ead
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RKStorage-journal

        • Path /data/data/com.cineplexalert.moviealert/databases/RKStorage-journal
        • Size 8KB
        • SHA256 af84d2a1b031d80d14f994621da913283493467b576b84b982d1f04b9e0e464f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updates.db

        • Path /data/data/com.cineplexalert.moviealert/databases/updates.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        updates.db-journal

        • Path /data/data/com.cineplexalert.moviealert/databases/updates.db-journal
        • Size 512B
        • SHA256 121afe21bb46a2dbf08ae9f3914a5a77fa568d2bc57c8932bc92e4f307fc4e62
        • MD5 SHA1 SHA512

        updates.db-shm

        • Path /data/data/com.cineplexalert.moviealert/databases/updates.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        updates.db-wal

        • Path /data/data/com.cineplexalert.moviealert/databases/updates.db-wal
        • Size 16KB
        • SHA256 efb414f003b6e837809209c424924984af72cd99318c3da982b4db5c164b8423
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updates.db-wal

        • Path /data/data/com.cineplexalert.moviealert/databases/updates.db-wal
        • Size 76KB
        • SHA256 6f0195a0dabe7c013e8dde24c6d9e2a678d7b759094b530e327d3fb7b6d1202a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updates.db-wal

        • Path /data/data/com.cineplexalert.moviealert/databases/updates.db-wal
        • Size 169KB
        • SHA256 74c9fcf174dcb2fcd0568298d9f498c4be4fb3ee9b21c00c5901fa62a3732176
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation2996862596904096036tmp

        • Path /data/data/com.cineplexalert.moviealert/files/PersistedInstallation2996862596904096036tmp
        • Size 570B
        • SHA256 2367b679fd4cfbf588f706f6661dc7f52b1b1de98c6eed269271f047a59fe92f
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation5065768447577164715tmp

        • Path /data/data/com.cineplexalert.moviealert/files/PersistedInstallation5065768447577164715tmp
        • Size 90B
        • SHA256 5d8d01de76e7effdb59ec605ea0c33677fe224e2678871ec65631fcee3f1778d
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MzQ1MjE1MDA3NzY6YW5kcm9pZDo2NjAyMDczZmQ0NTY0ODhjNDJmZmRk.preferences_pb.tmp

        • Path /data/data/com.cineplexalert.moviealert/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MzQ1MjE1MDA3NzY6YW5kcm9pZDo2NjAyMDczZmQ0NTY0ODhjNDJmZmRk.preferences_pb.tmp
        • Size 321B
        • SHA256 a01a1264fdc6cc80b3c52b2073dfd12d85c7d826998b15de58b172341ce6159f
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MzQ1MjE1MDA3NzY6YW5kcm9pZDo2NjAyMDczZmQ0NTY0ODhjNDJmZmRk.preferences_pb.tmp

        • Path /data/data/com.cineplexalert.moviealert/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MzQ1MjE1MDA3NzY6YW5kcm9pZDo2NjAyMDczZmQ0NTY0ODhjNDJmZmRk.preferences_pb.tmp
        • Size 345B
        • SHA256 9961ae071295b2212a454d2ac9988ff924fd9e383e458c4c22872366a8f2a15e
        • MD5 SHA1 SHA512 TLSH

        dev.expo.modules.core.logging.dev.expo.updates

        • Path /data/data/com.cineplexalert.moviealert/files/dev.expo.modules.core.logging.dev.expo.updates
        • Size 310B
        • SHA256 885efc29c9c1e6201a33bcbf6773587bb7a744588186e23bb1b74af62f0bfb1b
        • MD5 SHA1 SHA512 TLSH

        dev.expo.modules.core.logging.dev.expo.updates

        • Path /data/data/com.cineplexalert.moviealert/files/dev.expo.modules.core.logging.dev.expo.updates
        • Size 117B
        • SHA256 4a6cd812257a488aa4f2f0b3f4bd1160eaabd935783124a08cb04650a2fb22c9
        • MD5 SHA1 SHA512 TLSH

        dev.expo.modules.core.logging.dev.expo.updates

        • Path /data/data/com.cineplexalert.moviealert/files/dev.expo.modules.core.logging.dev.expo.updates
        • Size 247B
        • SHA256 c7e0f05513303fcbdae0ff8ad23eb6799f98ef6c15cac668aaf62674cf8ec2ba
        • MD5 SHA1 SHA512 TLSH

        dev.expo.modules.core.logging.dev.expo.updates

        • Path /data/data/com.cineplexalert.moviealert/files/dev.expo.modules.core.logging.dev.expo.updates
        • Size 238B
        • SHA256 7a30b72dfa93857a5eeeff737844a110aebfd7f9b16f21148380c0987f35c6d6
        • MD5 SHA1 SHA512 TLSH

        dev.expo.modules.core.logging.dev.expo.updates

        • Path /data/data/com.cineplexalert.moviealert/files/dev.expo.modules.core.logging.dev.expo.updates
        • Size 1KB
        • SHA256 43915038d2140af0db56d314a43b3839d541f3a70c8229bff02b6588e0643588
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.cineplexalert.moviealert/files/okhttp/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.cineplexalert.moviealert/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 f176082ba6e9e9f1c823887e12f442bc34ca0953134a29ce9c2efca9fbf47948
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.cineplexalert.moviealert/primary.prof
        • Size 10KB
        • SHA256 3ba2f7f5313a848cae667d21181aa0b0dc86f70ba32fbb62552559869e54d828
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.cineplexalert.moviealert/primary.prof
        • Size 33KB
        • SHA256 213db7accdbfd854e69f0b3a7c0ebd8ece1a920194dba1f4797203e6913ca370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH