f05f8929718902c82af013f3f587193e48bc8fa3139322957454ffbe592a4d0d

Analysis

max time kernel
57s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
09/08/2026, 14:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
papaspancakeriatogo-1665355725-www.androeed.ru.apk
Size 29.5MB
Sample260809-scy1jaba47
SHA256 f05f8929718902c82af013f3f587193e48bc8fa3139322957454ffbe592a4d0d
MD5 7ede91645358cb36cf1485178b79b38b
SHA1 4191d0bd2b2e3fc3ff4ee57daa849d9667e8703b
SHA512 5be29d5e51aa8037a0e840ebd81e8aa5a07711bed3d74ef571aad5464eade3ac4a05774a5513bbd3ba34efd6bce68bd1b29bdca250d20d08138ce5745767126d
SSDEEP 786432:2sDmm7nQHnO4+CFQGxiWo/0GC04X4CMZxwTyetP7P4EVYB:3nQHO4e0oVC04vMzwTzpYB
TLSH
T1436733217F11924AF1FDD574672AE0489B186DD0967AE70E0ED0BA18633FB8429E7CDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	air.com.flipline.papaspancakeriatogo

Checks CPU information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	air.com.flipline.papaspancakeriatogo
File opened for read	/proc/cpuinfo	/system/bin/cat /proc/cpuinfo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	/system/bin/cat /proc/meminfo

air.com.flipline.papaspancakeriatogo
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4288
- /system/bin/cat /sys/devices/system/cpu/present
  2⤵
  PID:4356
- /system/bin/cat /proc/cpuinfo
  2⤵
  - Checks CPU information
  PID:4380
- /system/bin/cat /proc/meminfo
  2⤵
  - Checks memory information
  PID:4399

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

javaTrustConverted.tmp

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/.AIR/certificates/javaTrustConverted.tmp
Size 209KB
SHA256 fdb02588e561546d2aafa07c59888a7ca2dd10dc2bb83d018729ecc56c1fd444
MD5 fe725808f1758ae6d732d0939453f615
SHA1 a516ee6b3ad7edc0fc2787c97178617c4dcab855
SHA512 c2fcb19468c63150fc0937a2e3b90125acd651d196d3337c47489545ce0a46e8da5fddaa5aa40ef4cbdcf563f8c3077d6858c9d3d4b13657d41a33519a85d33f
SSDEEP 3072:q0Hb7lWVEQZOqvsJx4iwKHimmjYXYRpst/a5cDtdOvwdtMoHE+zdaMfR+e2yCPFT:qUOEK0AmZjX+PItnJZ/XJlGqf5J7yhQI
TLSH
T13124AEABCF912C4A24E7F491C9BB125ECD198362ADDBB0B31D193805C749A2E75FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaTrustStore.tmp

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/.AIR/certificates/javaTrustStore.tmp
Size 149KB
SHA256 4732116c828f9e20e6530ce82aa4fb76f5fc4b8c3a0f7d271d7b5db9d5ba0302
MD5 388c3ca623aa1b7d3716c9b20beb4c21
SHA1 28057145b68d7396f59778a420839abb498e19b4
SHA512 a0047c4c48fe71d540b86d6cebd698e7ce7e806ffe28292ae01e669c8555b20466db36b133501d831793ed4e0cd5db3b01344f513215133ff6f2a9bd8eea0450
SSDEEP 1536:uTIWgKgRVR7bNjpIHosxZodXE95NTZHpMbpEQX1O0UqOjlmpLIGKzIMXvQvVqvB:UgPVpxoLZoFS5epEmw0CEpJ04vVqp
TLSH
T107E37D9B0F383815BFC29E9466CCE63B3E79B3D06565281B2066C4F169E27F0798D41E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/.AIR/cookies
Size 136B
SHA256 674571f44b53c520d7a550e41fd551b902efec5b04d192d79d27535448388ae6
MD5 aeb36ea4e9bd752942bf19404299792a
SHA1 ea675c9a864349a7d75b9335d120a6b353604f34
SHA512 3d3a5daeff0cdf95e43b97a5b805f68306f9c071328bbc74e6ef5631d017224c78ddb48a83abbab013ff857497af9aa1e4d33a4897ae21701e421f8f85842b2a
TLSH
T1BFC02B6F20C7502B0344C7613BC0276F46818A0C0B98D2124086082B13CC114784C8C2
MD5 SHA1 SHA512 TLSH

Submit Download

application.xml

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/application.xml
Size 4KB
SHA256 17c97aa820835dcf0a0f4f499635a4d78c0d9e6b3cc4149367819e59716a3da6
MD5 2f4efb3e925181b17bfb538d51275797
SHA1 4f9c408e39734757674dfea85726afa0b51f423a
SHA512 e9660665c2bac684a326f6a621939dd835c3bbf83bb6c4504c974899629fd2099a316f1e63306f27db425fc88de391ced40d7041641af76adaa2a0540103c627
SSDEEP 48:c9gzXzCnKrVfw3Caxk7Ox43VR6vPMZZpqkyzuytM0jj/++8prM0s7lczMyQN77V+:ugzDCa1xoMZKbEnbh2lSQN1wOUh+m
TLSH
T1CA811F451BCE14F6059FD72BF83E40406FFA976C213AA29AB8E650EA7AC914423F5D43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/androidx.core/META-INF/ANE/Android-ARM/library.swf
Size 1KB
SHA256 feced2c9cac182fbe5923d352c93f73f3ee894f24d9055cb86fbb91f61576f65
MD5 46b84fd45ef3b782497d32e218ff52a2
SHA1 b9894a73adee11cc760b130f68a860c70d784297
SHA512 2c3040ac6bd86e2e4d9259e4c8f8a9d5ea43dbec058267f84ec9b8bb789cef4627af5f325dfad7440ffa2c6f9a3d8cbc0540f9de527458b7d5cbf60be6bd2d38
TLSH
T1BA21082D84A97AE11DB281B62091F7FF341A5FD4680C6C2A88B43EB83C4D00022BCB0D
MD5 SHA1 SHA512 TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/androidx.core/META-INF/ANE/extension.xml
Size 1KB
SHA256 52ad36e8957a793243e6812928fc50e8cc2de4649eea458ac4190d880322851e
MD5 c4be4dc545c5b0f40455fbc444624cec
SHA1 46f64cb89bec3a53b621e23472129c16777f233e
SHA512 bfea74051a514cf12a6702225c427d95b372f5f7928e00b48ed3a02ad3e74fe807ab2aa66d5fd59b4724942394e953e90680939b32ab4bbc2b0452dc7ba44cb8
TLSH
T1283106840F4C4D660BFDA025EA7E50C4673B3D787851B88969E3615269BF25610E2EF1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/com.distriqt.Application/META-INF/ANE/Android-ARM/library.swf
Size 13KB
SHA256 0e9db79db3874cbb150630947cfae32fcf7b91cce13690d5214bfb2825a11bd8
MD5 57cef2bf1c161d65e22b5c3e617e102a
SHA1 abbc302d6cee820195c132a842d3958a3a58426e
SHA512 73ac9e4e549c6f29caef4033883864a72bc3f9f15845dff1bbec63839b0a316e4eb2733105a1c5938974d22029357357a7424eb450abc4234b23823ebefdcf83
SSDEEP 384:y5NiYbHqtPV28vfmyl6BCk0St+LCRANcLIqgmA:y+z3vfmylrkMuRmcLIqK
TLSH
T16E52C0E9041E2E5DE982D170F7FA3B8729033235F738D0D2AB6BE7564DF102AA194635
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/com.distriqt.Application/META-INF/ANE/extension.xml
Size 2KB
SHA256 365d0b3718735967f7407b61ff76da00ba220623044b8856be5910bab24bfbde
MD5 509c4fa74f58658fe40d09679209d0a2
SHA1 d8191e172d5d734743966c8ff08d92b755d4bf17
SHA512 6a6784ea0135dfdc27f0421b7d6c5059b26fd0496749ee6de7413cf2921bfa1e9f37e2959dca6d9f1dd91bcd954cb31dabac1c4d937c9dc97c9004d12c030e5d
TLSH
T16451C9C60B9F4D9543EEB03B8E7AA0C4623B5C2CBDC1BC4D91E31115866F1A92353EB1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/com.distriqt.Core/META-INF/ANE/Android-ARM/library.swf
Size 1KB
SHA256 1922ae616606c78eea7bab79c48a820e4361f269e77bade5bdf4385b4fae1bb7
MD5 d35d4e12e2df74e0169d7e615319996d
SHA1 76fd1b12bc81adf2cb1b56cc088704fc01a13cf0
SHA512 fcb725a0546accab67cdb4d64304e6acc2bea8adc0bd8b3f038aeec24ac35648e4f222ad4ad4f6b367c87585810b00f0b3fcb7589011d3ac2443cf1fd231511d
TLSH
T14E311D6BFAEB11D7649FDF7308FCC722E970A69EC14D63499074516DCD8096DA8D1010
MD5 SHA1 SHA512 TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/com.distriqt.Core/META-INF/ANE/extension.xml
Size 2KB
SHA256 3716a9fe9018f555eee29259054489554e0553e3219b008571bc49ff4610074a
MD5 21706ac03b52098ad9147573ced0055f
SHA1 1e762d574f6199c4947702dc9a8b95815819219e
SHA512 a0a3f147e1c72565f470453823071b1590f8043046f875affa38e71adc3c2de4c4248b700ef9eca23cdbd49ab91f7daf8670e3a65de57e2dc5908ae3d8384c7a
TLSH
T1FE5115C4079D4D661FEC91369EB760C8732F2C2C7D81B98DD2E30126C76B2E52182EB1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/com.distriqt.InAppBilling/META-INF/ANE/Android-ARM/library.swf
Size 13KB
SHA256 fe4ce8d888db2d2f350bbd949cc3f20ba88459c19b4e7351945bba63a76926d7
MD5 cb04310fe4f9e978464b71139c65047e
SHA1 b05100a9a419eff8af062cd63ebcfdc06806e738
SHA512 72a8f2b09396199850a95b535c02711e8166b50f376fe4b3f4e6c0b236ceb2f53e9ccd8c1e011eeb5f301d03d1fb676a7d02e78180a8c187451e5a3d854169ac
SSDEEP 384:b3iCyHIbhf3yzJtKJG1vSOdkeTnvBKmPHEDeYNYUkm:jwHIVi1taQvRj5NHEDcUkm
TLSH
T14952F147E72E1BF0735A7E56824A4108123DB94188A7DC3DC07E163D94D94FD791F929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/META-INF/AIR/extensions/com.distriqt.InAppBilling/META-INF/ANE/extension.xml
Size 2KB
SHA256 6bde181682af7003c5af5273d654ef518849468c7ae905ddcd9064d6da01fff3
MD5 27d0451d19421315ea880230bcc3b4d1
SHA1 daadf0e46d5c950feaadb309c5cf72d63a54c49e
SHA512 f567539935612f604fb1b11878309b94fc49d4d680df7c49c0dcbcf35ec70b1f22acccd014696b6b081a3755cfb05f8ee6e4e0befcc130b4eeecf096608fe383
TLSH
T193510CC40B4D4E7E07FC62398EFA90C4576B1CAC7CA1B868D1D705718A5F2E53141AB9
MD5 SHA1 SHA512 TLSH

Submit Download

PapasPancakeriaToGo.swf

Path /data/data/air.com.flipline.papaspancakeriatogo/cache/app/231a8af0-edb8-4478-b273-e8e23d7c5dda/assets/PapasPancakeriaToGo.swf
Size 16.1MB
SHA256 537af2ff7772470b7feeb0952bf97f1d7d9d06d1da80948c8c932ac8865259e2
MD5 cefe00c444cbe6b5c5c74330ea167394
SHA1 e70524d4087785f9a485687e27f29d4716436953
SHA512 25f3cbb2c50f827d218012bd8360264477bd28a290671103133c048e57ac70432d873a7a170fcffe4e0713b7cceedc6de8cb04a4853c0c7e7197b6ca4469fa53
SSDEEP 393216:u4Ph9W/AOe466/DyN01v+Pd+RNwm0tA4r17n7RUgJFNIaK:u4PeW466ryN01GIRNutXplBeaK
TLSH
T1980733184F7572A5B87ABF7AD562753479C164AC0235DC04380DDAAACBE33366CE728C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QualitySetting.sxx

Path /data/data/air.com.flipline.papaspancakeriatogo/com.flipline.papaspancakeriatogo/Local Store/#SharedObjects/QualitySetting.sxx
Size 53B
SHA256 aee646c3b3b93398013558c8ff83f509e90206c559531416612e65968acd36fb
MD5 4f3ab808b76873c575d15d9e00b6c21d
SHA1 62a88ab40f58a418a9ae8f91f720244ca9b2d56a
SHA512 872c56ca4923c9b2219920a601fb463fb714119873a709bea79bdde8aca7d368e9e61d42cfcbb53152d02960f0e3e7fcb6985b798fe06c4f9c9999811f00c41a
TLSH
T1239002C852644427F2250070F1AC130854A20894417F505049061A90D4045C1A242911
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads