Files named OpenMinis-1.13.1-hanli-liveness.apk

ns66.pro · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

www.ns66.pro · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

u.88wei.top · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

shop.laoyoutiao.vip · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

www.laoyoutiao.vip · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

laoyoutiao.vip · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

www.88wei.top · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

88wei.top · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

dom.f95he.my · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

demo8.vialy.cn · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

demo6.vialy.cn · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

demo9.vialy.cn · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

www.zz444.cn · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

zz444.cn · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

laoyoutiao.vip · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

www.laoyoutiao.vip · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

mm.xn--ouw410g.cc · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

ld.f95he.my · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

gptvia.top · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC

www.gptvia.top · OpenMinis-1.13.1-hanli-liveness.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
application/octet-stream
38.66MB
2026-09-19 00:03:26 +0000 UTC