cfbc0eaeb8cf4bea1391642c9208e3b8c97966d3abe31bc382b04fb0ecd24d4e

Analysis

user interaction
yes
max time kernel
118s
max time network
605s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
30/09/2026, 14:17

Sharing

Reason

exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"I0930 14:18:15.852541 4125315 opengles.cpp:285] android_startOpenglesRenderer: gpu info\\nI0930 14:18:15.852569 4125315 opengles.cpp:286] \\nWARNING: could not open libX11.so, try libX11.so.6\\nWARNING: cannnot unmap ptr 0x7ce89a201000 as it is in the protected range from 0x7ce81a200000 to 0x7ce89a400000\\nFailed to call cuInit, cannot use nvidia cuvid decoder for h264 stream\\n[h264 @ 0x5e81e107e880] no frame!\\n[h264 @ 0x5e81e107e880] no frame!\\n[h264 @ 0x5e82539c2900] no frame!\\n[h264 @ 0x5e82539c2900] no frame!\\n[h264 @ 0x5e81cab99b00] no frame!\\n[h264 @ 0x5e81cab99b00] no frame!\\n[h264 @ 0x5e827a9ed200] no frame!\\n[h264 @ 0x5e827a9ed200] no frame!\\n[h264 @ 0x5e822526e480] no frame!\\n[h264 @ 0x5e822526e480] no frame!\\n[h264 @ 0x5e81ced67200] no frame!\\n[h264 @ 0x5e81ced67200] no frame!\\n[h264 @ 0x5e8224bda400] no frame!\\n[h264 @ 0x5e8224bda400] no frame!\\n[h264 @ 0x5e81ce4f9b00] no frame!\\n[h264 @ 0x5e81ce4f9b00] no frame!\\n\",\"error\":\"signal: segmentation fault\",\"time\":\"2026-09-30T14:28:22Z\",\"message\":\"Emulator process unexpectedly exited\"}"

General

Target
flip-master-mod_3.8.00-an1.com.apk
Size 156.2MB
Sample260930-rlspfa114n
SHA256 cfbc0eaeb8cf4bea1391642c9208e3b8c97966d3abe31bc382b04fb0ecd24d4e
MD5 4cad5e85e9718e977622d5587d84849a
SHA1 8820219e36b08ee6d48b6a84f20e3df02cace2c4
SHA512 53a9ca591d192d5506d8da392c53c8e1f4242cf5e7043ea02ea747beae3743969f959b224a50cc6601d884fd2613d8c9871c4de22cb7a0d7167494165bd3f567
SSDEEP 3145728:U1lhWZoKjm66TaU1BNUEH7EQG3DnSE9GreKPNLPs4kgLwDb0D3YDLnPdF:U1buoKjm66Tj18Q18S9NLEn6ssY/dF
TLSH
T127783392F143CA04C83789368D62A9A107677D1EEF46971B3048BF1976F33D1AF22796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.motionvolt.flipbounce

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
258	discord.com
384	discord.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.motionvolt.flipbounce

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.motionvolt.flipbounce

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.motionvolt.flipbounce

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.motionvolt.flipbounce

com.motionvolt.flipbounce
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4262

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bjFa8VEkqvKmEj33rZC_swGvx+0=@#$1793369918086

Path /data/data/com.motionvolt.flipbounce/cache/usercentrics/etags-JxyJzuU6ReaYzZ/aggregator-en/bjFa8VEkqvKmEj33rZC_swGvx+0=@#$1793369918086
Size 28KB
SHA256 919ad8ca97cc2ea1ee0a956860d719c8f7ee399d03140deedad1f4d68358b1f6
MD5 b50e720c6b576556371b614451f56628
SHA1 6e315af15124aaf2a6123df7ad90bfb301afc7ed
SHA512 d2136d204fe77e2858a2c750392cdaa42096d311432fc5bae112f2a556cd8af461db790567ab2ea1721c9335d9fa29111b8616216c8b7aa0185e65bee7e3bf3f
SSDEEP 768:7jnJv2nus4URnLBdFmYXPCnK3O8iq21yVQ7VycJ19Rn7x:7jRW4URNCYXPCTxl4QBycJR9
TLSH
T1C9D2A719695CA53E4BAE03E0ADBA6E892BFC6059132C9450DCFDEF1D07407F42BA714B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b4ce3ef65807b62b061d70c8aa5a09f@#$1790779717521

Path /data/data/com.motionvolt.flipbounce/cache/usercentrics/etags-JxyJzuU6ReaYzZ/languages/7b4ce3ef65807b62b061d70c8aa5a09f@#$1790779717521
Size 56B
SHA256 a75d094caba33ac05120819a5fd16b225bcd6ceda6d4b507d6dac56d3bbd4320
MD5 fcf6c185dd87c3bb654fdcc1368ef6ae
SHA1 6c6811600ca6a3b4a2c4b9ed64a772503605e6df
SHA512 8aeb96c48d2fdb416678102338d2c227457afffceef6640da256c37ad43df82b975eb540940d5083676d3d2961a962fab6ecba2f163439177005b97926c5f541
TLSH
T133900289024024067D51910430515D8B5A8014C41016BC2303264C1413D744290C0846
MD5 SHA1 SHA512 TLSH

Submit Download

52427542ff0aed2837e10cb9fe92a4ce@#$1790779716973

Path /data/data/com.motionvolt.flipbounce/cache/usercentrics/etags-JxyJzuU6ReaYzZ/ruleSet/52427542ff0aed2837e10cb9fe92a4ce@#$1790779716973
Size 632B
SHA256 6af821baeda01af7835d98efc79e3e9b9ed60e0bdac8a2c7e998583de8c4415e
MD5 f6e7201c1e81f787aeb7bc4875b871ab
SHA1 2e8e2ed756f0470880627a752d413e72d17084c8
SHA512 741c8260c1fb6389f1be9b74f3597b54958e8965ccd2e806abb967d46be6ce9f5614e74996a9d347969b90a3a549c9a431b21f87b66a75e0ae49602c743d4231
TLSH
T1CFF0A98A84441C1C05DFE9F7EE661BAE3432624FD3DDEC9498310E11919A3E961677C9
MD5 SHA1 SHA512 TLSH

Submit Download

30ce3849e87d3f66b17422c3d34cb678@#$1790779717651

Path /data/data/com.motionvolt.flipbounce/cache/usercentrics/etags-JxyJzuU6ReaYzZ/settings-en/30ce3849e87d3f66b17422c3d34cb678@#$1790779717651
Size 27KB
SHA256 54ead0b16b95cd1f515c5efa30fa2f2ba68acdd0e5d141b44d42a87d1ce9853c
MD5 b1edc5c017c69d32a7ee0638841e5571
SHA1 1020d8fe5162c9ca4bfa293d2cf72d6faf66f579
SHA512 7cc335014e7baa72daa120c6e15784802a7a1be93a85d4d07d121f28dcf2c2ebb1fef39952b65cfed31f649072481a9887ca582997fec7eacddf475be5dcd08e
SSDEEP 384:TJe5iEMbACqFZjKTVJwETQXbhFxIOctBeTVAGnZ6g4A7e6Rs4mRkQJG64TbB0:TJKrgACKeTB0XbhFxIOrT1UUaLRG6M+
TLSH
T1A7D2C61D55481D7E1B8713A8FD4BAD83BBEC50293314B965ECACC92C02D67E8677B283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

310b136a04fff90e7b2ad58fff2eb6e2@#$1790864318425

Path /data/data/com.motionvolt.flipbounce/cache/usercentrics/etags-JxyJzuU6ReaYzZ/tcf-vendorlist/310b136a04fff90e7b2ad58fff2eb6e2@#$1790864318425
Size 839KB
SHA256 1415e15be712566b3634ad758618070b62b5c04ca548b1dde863e9efdba75dc6
MD5 b117adfee9cc5b7a3f85159c73c8b9ac
SHA1 533b923ca1a1efdd6ac78108e0df90609fab84fb
SHA512 57b29adb0462e67e580a1c5330c7af257bc9c645b0799e8ce3bb13e3b6c9f1e5eece688b38778ea6fdfbd54e0411cce2bb774da972caf2e4fa7fc79a32927e3f
SSDEEP 3072:NFsR02NZia+g19Vja6QFdqW/734z2YvJiTdicDt:sRUwjg/7arvJGzDt
TLSH
T18005366F12800839B77B5399D60677C759D9307E4FAC18E9B89D193E17E41E33A2228F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8070a5c9b0f84f180a604b1f56cf822b@#$1791123518176

Path /data/data/com.motionvolt.flipbounce/cache/usercentrics/etags-JxyJzuU6ReaYzZ/translations-en/8070a5c9b0f84f180a604b1f56cf822b@#$1791123518176
Size 13KB
SHA256 a0dfe9074b7634a52baf7717a3c02c6a6b0e92ac18d456e9380107ecd57b54c3
MD5 2ee08404249a9b3966be62051fcdf84b
SHA1 c537c402d6a4329a11303055ad6b667ed431abcd
SHA512 77e51ab7da18038a99bbee1c145d404d57fb8e683577695c65517c498cdecf75202350de442743ea738d43f7807a20a5deb6345ea03d02e9777db674cf380cb4
SSDEEP 192:SsFnmQwLNK/Y6kEDAAtbeMmxO5mQK1rjU7t+K4K8ko24SIJccIsKcML42C+Kwcoq:uFNpAkMJ5dXoKl3feVqXTTeR
TLSH
T17552EA0E9758737CA38703E5746B9801677C901A23A98E6179F6C83C0B79B6C63772DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.motionvolt.flipbounce/databases/com.google.android.datatransport.events
Size 56KB
SHA256 f3f9901378fad218c15323d0c27b10389edc4f15a7bd7149c6a9af3f6edb011d
MD5 bd16cf6253c09fb53be2a59050475571
SHA1 8ee318c38b7bfcfd8d6af056285b6033b19f5460
SHA512 b42f1333403bef7995a16d6d5d77937f9930caae9e38dfb078a2a881a9d743b119124454acb85a7fd9aced3d8f33b9e07e984c63b8a8869ea443687b40064955
SSDEEP 48:TYg59MENZBdUdndVd/729IvdldHlq8/Jq4qPS/FZ4FP:BMEX0wIyNjaa
TLSH
T1C743419D1A3C2220C6EE283ED3F243A35B7CD3DF5726937239944DF98DC20697825999
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download