f6a90120cc5e05278cf849deef3c86e36eb1343040baec67079ade8a0cb3e466

Analysis

max time kernel
57s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
09/08/2026, 16:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
papasscooperiatogo-1665167719-www.androeed.ru.apk
Size 29.8MB
Sample260809-vacevsal7t
SHA256 f6a90120cc5e05278cf849deef3c86e36eb1343040baec67079ade8a0cb3e466
MD5 57fffa917c9568a80f839c84a4007ef6
SHA1 7015b498e17b51f419a51d47fe0092a40eb82e30
SHA512 88fb5a6faa0960ea6892587c4da59f4ba4550b3de57566f98ba0994249a541356f267fc79809e1c80e530c8a0ed26203c79a86f9d19646f5e2708e1bc9c9bd46
SSDEEP 786432:yyd8sDmm7nQHnO42xgGdSCI6HNTic4wP3/W7UckvF8Ta:yyjnQHO4wg3qVd3ykN8Ta
TLSH
T1E8673321BF12D60AF6EEC4B1676EF4859B259DD0866A931F0DD0B614233FFC817A1C98
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	air.com.flipline.papasscooperiatogo

Checks CPU information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	air.com.flipline.papasscooperiatogo
File opened for read	/proc/cpuinfo	/system/bin/cat /proc/cpuinfo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	/system/bin/cat /proc/meminfo

air.com.flipline.papasscooperiatogo
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4215
- /system/bin/cat /sys/devices/system/cpu/present
  2⤵
  PID:4250
- /system/bin/cat /proc/cpuinfo
  2⤵
  - Checks CPU information
  PID:4273
- /system/bin/cat /proc/meminfo
  2⤵
  - Checks memory information
  PID:4292

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

javaTrustConverted.tmp

Path /data/data/air.com.flipline.papasscooperiatogo/cache/.AIR/certificates/javaTrustConverted.tmp
Size 209KB
SHA256 b3223b3406769f47863c6fbd39bdb2fa80b0e293ae94d5ce9b39aa83c68c1096
MD5 0f00a3f7460c3d9a8a23e65965511517
SHA1 5e6344b0a926d47dd501d6b7f45340e6e48825d0
SHA512 527b6ae46c5b5ecf5168c234ee87ec67109142e29fadb54a219ef5f4b6eabf06aff7820276dd8676fc7479a40c3d60b7af213e3bed4db6ec8962bf76ba5f5a66
SSDEEP 3072:J4SZ4IKVLbfMIniN0JwahDcxNbRE3VpAXIqddrFduhJfQqWNNRiVZsfhqhPIqHjL:J4S20FNCZyUJfHuMlFa/cZO4FJ3mXCLf
TLSH
T1DC24AEABCF912C4A24E7F491C9BB125ECD198362ADDBB0B31D193805C749A2E75FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaTrustStore.tmp

Path /data/data/air.com.flipline.papasscooperiatogo/cache/.AIR/certificates/javaTrustStore.tmp
Size 149KB
SHA256 5570e5f4d1d47bec655c77ee88ff64e0a4fbfb7b0ccccbf6bf06bbfd64009b19
MD5 84e351c043e946478fa62248ff3f59bb
SHA1 25594e63f87b51b7e0fd0935690e40405de75bf0
SHA512 770e969dac24454fb24e8f18ee2e7db11c3736f57131410432974487c989f2ab876ca212e76c0cbdee37a31e942275668fa6b87f1ecc0c35f582adab59fce307
SSDEEP 1536:fywSZv0H01y4IzHoGIxPv4NT6izSIGiI/ZnLIGDmrCmEnEbn+UYtdQKpABjImVw:awW0Uw4ILiPQDM515ln+1WxpA5NVw
TLSH
T1D6E37D9B0F383815BFC2DE9466C8E63B3E79B3D06565281B2066C4F169E27F0798D41E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /data/data/air.com.flipline.papasscooperiatogo/cache/.AIR/cookies
Size 136B
SHA256 674571f44b53c520d7a550e41fd551b902efec5b04d192d79d27535448388ae6
MD5 aeb36ea4e9bd752942bf19404299792a
SHA1 ea675c9a864349a7d75b9335d120a6b353604f34
SHA512 3d3a5daeff0cdf95e43b97a5b805f68306f9c071328bbc74e6ef5631d017224c78ddb48a83abbab013ff857497af9aa1e4d33a4897ae21701e421f8f85842b2a
TLSH
T1BFC02B6F20C7502B0344C7613BC0276F46818A0C0B98D2124086082B13CC114784C8C2
MD5 SHA1 SHA512 TLSH

Submit Download

application.xml

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/application.xml
Size 3KB
SHA256 040f99e546d4b0aa30ec0411b69a1cdd7576d757f2fa83b5aa30920e40b466aa
MD5 7329e0a9bacc87662be41df8761b4e8e
SHA1 7b41465778380c408de645a5242e105cb4293fb4
SHA512 acfbd0555a0cd9a05f06a955a82050ecae1ea8c1d5a65ab1e454c92e44f30b2fb3e0ea5807619c85725a73d25ad1f582ac6fa1fd9511ebecdc162f55d4cc8f57
TLSH
T1F38143401BCE54F605AFD727F83E4040AFFA936C213AA19AB9E650EA7AC914433F5D53
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/androidx.core/META-INF/ANE/Android-ARM/library.swf
Size 1KB
SHA256 feced2c9cac182fbe5923d352c93f73f3ee894f24d9055cb86fbb91f61576f65
MD5 46b84fd45ef3b782497d32e218ff52a2
SHA1 b9894a73adee11cc760b130f68a860c70d784297
SHA512 2c3040ac6bd86e2e4d9259e4c8f8a9d5ea43dbec058267f84ec9b8bb789cef4627af5f325dfad7440ffa2c6f9a3d8cbc0540f9de527458b7d5cbf60be6bd2d38
TLSH
T1BA21082D84A97AE11DB281B62091F7FF341A5FD4680C6C2A88B43EB83C4D00022BCB0D
MD5 SHA1 SHA512 TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/androidx.core/META-INF/ANE/extension.xml
Size 1KB
SHA256 52ad36e8957a793243e6812928fc50e8cc2de4649eea458ac4190d880322851e
MD5 c4be4dc545c5b0f40455fbc444624cec
SHA1 46f64cb89bec3a53b621e23472129c16777f233e
SHA512 bfea74051a514cf12a6702225c427d95b372f5f7928e00b48ed3a02ad3e74fe807ab2aa66d5fd59b4724942394e953e90680939b32ab4bbc2b0452dc7ba44cb8
TLSH
T1283106840F4C4D660BFDA025EA7E50C4673B3D787851B88969E3615269BF25610E2EF1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/com.distriqt.Application/META-INF/ANE/Android-ARM/library.swf
Size 13KB
SHA256 0e9db79db3874cbb150630947cfae32fcf7b91cce13690d5214bfb2825a11bd8
MD5 57cef2bf1c161d65e22b5c3e617e102a
SHA1 abbc302d6cee820195c132a842d3958a3a58426e
SHA512 73ac9e4e549c6f29caef4033883864a72bc3f9f15845dff1bbec63839b0a316e4eb2733105a1c5938974d22029357357a7424eb450abc4234b23823ebefdcf83
SSDEEP 384:y5NiYbHqtPV28vfmyl6BCk0St+LCRANcLIqgmA:y+z3vfmylrkMuRmcLIqK
TLSH
T16E52C0E9041E2E5DE982D170F7FA3B8729033235F738D0D2AB6BE7564DF102AA194635
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/com.distriqt.Application/META-INF/ANE/extension.xml
Size 2KB
SHA256 365d0b3718735967f7407b61ff76da00ba220623044b8856be5910bab24bfbde
MD5 509c4fa74f58658fe40d09679209d0a2
SHA1 d8191e172d5d734743966c8ff08d92b755d4bf17
SHA512 6a6784ea0135dfdc27f0421b7d6c5059b26fd0496749ee6de7413cf2921bfa1e9f37e2959dca6d9f1dd91bcd954cb31dabac1c4d937c9dc97c9004d12c030e5d
TLSH
T16451C9C60B9F4D9543EEB03B8E7AA0C4623B5C2CBDC1BC4D91E31115866F1A92353EB1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/com.distriqt.Core/META-INF/ANE/Android-ARM/library.swf
Size 1KB
SHA256 1922ae616606c78eea7bab79c48a820e4361f269e77bade5bdf4385b4fae1bb7
MD5 d35d4e12e2df74e0169d7e615319996d
SHA1 76fd1b12bc81adf2cb1b56cc088704fc01a13cf0
SHA512 fcb725a0546accab67cdb4d64304e6acc2bea8adc0bd8b3f038aeec24ac35648e4f222ad4ad4f6b367c87585810b00f0b3fcb7589011d3ac2443cf1fd231511d
TLSH
T14E311D6BFAEB11D7649FDF7308FCC722E970A69EC14D63499074516DCD8096DA8D1010
MD5 SHA1 SHA512 TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/com.distriqt.Core/META-INF/ANE/extension.xml
Size 2KB
SHA256 3716a9fe9018f555eee29259054489554e0553e3219b008571bc49ff4610074a
MD5 21706ac03b52098ad9147573ced0055f
SHA1 1e762d574f6199c4947702dc9a8b95815819219e
SHA512 a0a3f147e1c72565f470453823071b1590f8043046f875affa38e71adc3c2de4c4248b700ef9eca23cdbd49ab91f7daf8670e3a65de57e2dc5908ae3d8384c7a
TLSH
T1FE5115C4079D4D661FEC91369EB760C8732F2C2C7D81B98DD2E30126C76B2E52182EB1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/com.distriqt.InAppBilling/META-INF/ANE/Android-ARM/library.swf
Size 13KB
SHA256 fe4ce8d888db2d2f350bbd949cc3f20ba88459c19b4e7351945bba63a76926d7
MD5 cb04310fe4f9e978464b71139c65047e
SHA1 b05100a9a419eff8af062cd63ebcfdc06806e738
SHA512 72a8f2b09396199850a95b535c02711e8166b50f376fe4b3f4e6c0b236ceb2f53e9ccd8c1e011eeb5f301d03d1fb676a7d02e78180a8c187451e5a3d854169ac
SSDEEP 384:b3iCyHIbhf3yzJtKJG1vSOdkeTnvBKmPHEDeYNYUkm:jwHIVi1taQvRj5NHEDcUkm
TLSH
T14952F147E72E1BF0735A7E56824A4108123DB94188A7DC3DC07E163D94D94FD791F929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/META-INF/AIR/extensions/com.distriqt.InAppBilling/META-INF/ANE/extension.xml
Size 2KB
SHA256 6bde181682af7003c5af5273d654ef518849468c7ae905ddcd9064d6da01fff3
MD5 27d0451d19421315ea880230bcc3b4d1
SHA1 daadf0e46d5c950feaadb309c5cf72d63a54c49e
SHA512 f567539935612f604fb1b11878309b94fc49d4d680df7c49c0dcbcf35ec70b1f22acccd014696b6b081a3755cfb05f8ee6e4e0befcc130b4eeecf096608fe383
TLSH
T193510CC40B4D4E7E07FC62398EFA90C4576B1CAC7CA1B868D1D705718A5F2E53141AB9
MD5 SHA1 SHA512 TLSH

Submit Download

PapasScooperiaToGo.swf

Path /data/data/air.com.flipline.papasscooperiatogo/cache/app/114b146c-28e8-4312-bb5c-60992fb2873d/assets/PapasScooperiaToGo.swf
Size 16.7MB
SHA256 eb68aca2a408ef52809a45f0bbf5c86f24038a5a43a165cd77e7a5643509fc6b
MD5 12c98f11e8adfc0b1fa3fc924370493c
SHA1 2b4132ed485adf31a116c7fc8908d7281d4ab64f
SHA512 4549a72fa986f4d8431a94d63cd4a07b09cf1688d67f29671810de6fc3a66bcffce9c233cf73ffaae7b767d123fb21224d574b0d214bc41f35ca5743c2548450
SSDEEP 393216:C8onHbLwVLnYY/0SIOMLXbSv5Z9VhMTUoW5DgBvZE1:wbs15/0SIOnZ9MTUoW5Da61
TLSH
T12C073356E793ABB707ED47E38EF1E5E572D2A4B04F0401DD482DA0E956EC6DA03148B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QualitySetting.sxx

Path /data/data/air.com.flipline.papasscooperiatogo/com.flipline.papasscooperiatogo/Local Store/#SharedObjects/QualitySetting.sxx
Size 53B
SHA256 aee646c3b3b93398013558c8ff83f509e90206c559531416612e65968acd36fb
MD5 4f3ab808b76873c575d15d9e00b6c21d
SHA1 62a88ab40f58a418a9ae8f91f720244ca9b2d56a
SHA512 872c56ca4923c9b2219920a601fb463fb714119873a709bea79bdde8aca7d368e9e61d42cfcbb53152d02960f0e3e7fcb6985b798fe06c4f9c9999811f00c41a
TLSH
T1239002C852644427F2250070F1AC130854A20894417F505049061A90D4045C1A242911
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads