d6a299dc8da05ae1f69e2fa709cb4c3c52e77540482155f4f18fc0942d482cb8

Analysis

max time kernel
57s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
09/08/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
papassushiriatogo-1665880703-www.androeed.ru.apk
Size 31.1MB
Sample260809-vcq12avwhy
SHA256 d6a299dc8da05ae1f69e2fa709cb4c3c52e77540482155f4f18fc0942d482cb8
MD5 d22be882819b78ee715c7fe21893962b
SHA1 0ce3eb396301aaa7874f2c83f613d9b09cc84686
SHA512 19c4de3c5d4e13bfb5c3614acdb24440890f27a6476363d92b8e2738c285168210365631905cf6a3f1a439285226e24cda0725982c8414e4849e6275bb17d98b
SSDEEP 786432:9sDmm7nQHnO4R7sGGden2QtsPYZ9xkTtWX2ylbe:8nQHO49xN2QegZ8tfylbe
TLSH
T1626733217B15A246F1EDD2B4272EE0869B245ED0C66FB71E0FD1B614233BEC825E5C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	air.com.flipline.papassushiriatogo

Checks CPU information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	/system/bin/cat /proc/cpuinfo
File opened for read	/proc/cpuinfo	air.com.flipline.papassushiriatogo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	/system/bin/cat /proc/meminfo

air.com.flipline.papassushiriatogo
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4314
- /system/bin/cat /sys/devices/system/cpu/present
  2⤵
  PID:4347
- /system/bin/cat /proc/cpuinfo
  2⤵
  - Checks CPU information
  PID:4371
- /system/bin/cat /proc/meminfo
  2⤵
  - Checks memory information
  PID:4390

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

javaTrustConverted.tmp

Path /data/data/air.com.flipline.papassushiriatogo/cache/.AIR/certificates/javaTrustConverted.tmp
Size 209KB
SHA256 fdb02588e561546d2aafa07c59888a7ca2dd10dc2bb83d018729ecc56c1fd444
MD5 fe725808f1758ae6d732d0939453f615
SHA1 a516ee6b3ad7edc0fc2787c97178617c4dcab855
SHA512 c2fcb19468c63150fc0937a2e3b90125acd651d196d3337c47489545ce0a46e8da5fddaa5aa40ef4cbdcf563f8c3077d6858c9d3d4b13657d41a33519a85d33f
SSDEEP 3072:q0Hb7lWVEQZOqvsJx4iwKHimmjYXYRpst/a5cDtdOvwdtMoHE+zdaMfR+e2yCPFT:qUOEK0AmZjX+PItnJZ/XJlGqf5J7yhQI
TLSH
T13124AEABCF912C4A24E7F491C9BB125ECD198362ADDBB0B31D193805C749A2E75FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaTrustStore.tmp

Path /data/data/air.com.flipline.papassushiriatogo/cache/.AIR/certificates/javaTrustStore.tmp
Size 149KB
SHA256 4732116c828f9e20e6530ce82aa4fb76f5fc4b8c3a0f7d271d7b5db9d5ba0302
MD5 388c3ca623aa1b7d3716c9b20beb4c21
SHA1 28057145b68d7396f59778a420839abb498e19b4
SHA512 a0047c4c48fe71d540b86d6cebd698e7ce7e806ffe28292ae01e669c8555b20466db36b133501d831793ed4e0cd5db3b01344f513215133ff6f2a9bd8eea0450
SSDEEP 1536:uTIWgKgRVR7bNjpIHosxZodXE95NTZHpMbpEQX1O0UqOjlmpLIGKzIMXvQvVqvB:UgPVpxoLZoFS5epEmw0CEpJ04vVqp
TLSH
T107E37D9B0F383815BFC29E9466CCE63B3E79B3D06565281B2066C4F169E27F0798D41E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /data/data/air.com.flipline.papassushiriatogo/cache/.AIR/cookies
Size 136B
SHA256 674571f44b53c520d7a550e41fd551b902efec5b04d192d79d27535448388ae6
MD5 aeb36ea4e9bd752942bf19404299792a
SHA1 ea675c9a864349a7d75b9335d120a6b353604f34
SHA512 3d3a5daeff0cdf95e43b97a5b805f68306f9c071328bbc74e6ef5631d017224c78ddb48a83abbab013ff857497af9aa1e4d33a4897ae21701e421f8f85842b2a
TLSH
T1BFC02B6F20C7502B0344C7613BC0276F46818A0C0B98D2124086082B13CC114784C8C2
MD5 SHA1 SHA512 TLSH

Submit Download

application.xml

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/application.xml
Size 3KB
SHA256 7af8425f76460a908d44e09697cd2f2d226194729581d047b309f0480aa52a71
MD5 fd2c6cd8422b9d75188721ffc3c71865
SHA1 4154db46040c9562f996fb4d8fe3ed0bcdd12f1f
SHA512 ea3aaf3a6d8169c9ab00e799af3edf3f0d8285efe759f1779a48ed64cf227dfa675e9a6f13ea7362eec75a97198114ff53341a3ee6a98f11abb30a05ed5cabfe
TLSH
T1A08120540BCE54F5059F9727F83E40106FFAA36C213AA19AB9E660EB7AC915433F0D43
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/androidx.core/META-INF/ANE/Android-ARM/library.swf
Size 1KB
SHA256 feced2c9cac182fbe5923d352c93f73f3ee894f24d9055cb86fbb91f61576f65
MD5 46b84fd45ef3b782497d32e218ff52a2
SHA1 b9894a73adee11cc760b130f68a860c70d784297
SHA512 2c3040ac6bd86e2e4d9259e4c8f8a9d5ea43dbec058267f84ec9b8bb789cef4627af5f325dfad7440ffa2c6f9a3d8cbc0540f9de527458b7d5cbf60be6bd2d38
TLSH
T1BA21082D84A97AE11DB281B62091F7FF341A5FD4680C6C2A88B43EB83C4D00022BCB0D
MD5 SHA1 SHA512 TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/androidx.core/META-INF/ANE/extension.xml
Size 1KB
SHA256 52ad36e8957a793243e6812928fc50e8cc2de4649eea458ac4190d880322851e
MD5 c4be4dc545c5b0f40455fbc444624cec
SHA1 46f64cb89bec3a53b621e23472129c16777f233e
SHA512 bfea74051a514cf12a6702225c427d95b372f5f7928e00b48ed3a02ad3e74fe807ab2aa66d5fd59b4724942394e953e90680939b32ab4bbc2b0452dc7ba44cb8
TLSH
T1283106840F4C4D660BFDA025EA7E50C4673B3D787851B88969E3615269BF25610E2EF1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/com.distriqt.Application/META-INF/ANE/Android-ARM/library.swf
Size 13KB
SHA256 0e9db79db3874cbb150630947cfae32fcf7b91cce13690d5214bfb2825a11bd8
MD5 57cef2bf1c161d65e22b5c3e617e102a
SHA1 abbc302d6cee820195c132a842d3958a3a58426e
SHA512 73ac9e4e549c6f29caef4033883864a72bc3f9f15845dff1bbec63839b0a316e4eb2733105a1c5938974d22029357357a7424eb450abc4234b23823ebefdcf83
SSDEEP 384:y5NiYbHqtPV28vfmyl6BCk0St+LCRANcLIqgmA:y+z3vfmylrkMuRmcLIqK
TLSH
T16E52C0E9041E2E5DE982D170F7FA3B8729033235F738D0D2AB6BE7564DF102AA194635
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/com.distriqt.Application/META-INF/ANE/extension.xml
Size 2KB
SHA256 365d0b3718735967f7407b61ff76da00ba220623044b8856be5910bab24bfbde
MD5 509c4fa74f58658fe40d09679209d0a2
SHA1 d8191e172d5d734743966c8ff08d92b755d4bf17
SHA512 6a6784ea0135dfdc27f0421b7d6c5059b26fd0496749ee6de7413cf2921bfa1e9f37e2959dca6d9f1dd91bcd954cb31dabac1c4d937c9dc97c9004d12c030e5d
TLSH
T16451C9C60B9F4D9543EEB03B8E7AA0C4623B5C2CBDC1BC4D91E31115866F1A92353EB1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/com.distriqt.Core/META-INF/ANE/Android-ARM/library.swf
Size 1KB
SHA256 1922ae616606c78eea7bab79c48a820e4361f269e77bade5bdf4385b4fae1bb7
MD5 d35d4e12e2df74e0169d7e615319996d
SHA1 76fd1b12bc81adf2cb1b56cc088704fc01a13cf0
SHA512 fcb725a0546accab67cdb4d64304e6acc2bea8adc0bd8b3f038aeec24ac35648e4f222ad4ad4f6b367c87585810b00f0b3fcb7589011d3ac2443cf1fd231511d
TLSH
T14E311D6BFAEB11D7649FDF7308FCC722E970A69EC14D63499074516DCD8096DA8D1010
MD5 SHA1 SHA512 TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/com.distriqt.Core/META-INF/ANE/extension.xml
Size 2KB
SHA256 3716a9fe9018f555eee29259054489554e0553e3219b008571bc49ff4610074a
MD5 21706ac03b52098ad9147573ced0055f
SHA1 1e762d574f6199c4947702dc9a8b95815819219e
SHA512 a0a3f147e1c72565f470453823071b1590f8043046f875affa38e71adc3c2de4c4248b700ef9eca23cdbd49ab91f7daf8670e3a65de57e2dc5908ae3d8384c7a
TLSH
T1FE5115C4079D4D661FEC91369EB760C8732F2C2C7D81B98DD2E30126C76B2E52182EB1
MD5 SHA1 SHA512 TLSH

Submit Download

library.swf

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/com.distriqt.InAppBilling/META-INF/ANE/Android-ARM/library.swf
Size 13KB
SHA256 fe4ce8d888db2d2f350bbd949cc3f20ba88459c19b4e7351945bba63a76926d7
MD5 cb04310fe4f9e978464b71139c65047e
SHA1 b05100a9a419eff8af062cd63ebcfdc06806e738
SHA512 72a8f2b09396199850a95b535c02711e8166b50f376fe4b3f4e6c0b236ceb2f53e9ccd8c1e011eeb5f301d03d1fb676a7d02e78180a8c187451e5a3d854169ac
SSDEEP 384:b3iCyHIbhf3yzJtKJG1vSOdkeTnvBKmPHEDeYNYUkm:jwHIVi1taQvRj5NHEDcUkm
TLSH
T14952F147E72E1BF0735A7E56824A4108123DB94188A7DC3DC07E163D94D94FD791F929
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension.xml

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/META-INF/AIR/extensions/com.distriqt.InAppBilling/META-INF/ANE/extension.xml
Size 2KB
SHA256 6bde181682af7003c5af5273d654ef518849468c7ae905ddcd9064d6da01fff3
MD5 27d0451d19421315ea880230bcc3b4d1
SHA1 daadf0e46d5c950feaadb309c5cf72d63a54c49e
SHA512 f567539935612f604fb1b11878309b94fc49d4d680df7c49c0dcbcf35ec70b1f22acccd014696b6b081a3755cfb05f8ee6e4e0befcc130b4eeecf096608fe383
TLSH
T193510CC40B4D4E7E07FC62398EFA90C4576B1CAC7CA1B868D1D705718A5F2E53141AB9
MD5 SHA1 SHA512 TLSH

Submit Download

PapasSushiriaToGo.swf

Path /data/data/air.com.flipline.papassushiriatogo/cache/app/6461ef4d-4cb0-4ca6-abfa-ef3a4e620902/assets/PapasSushiriaToGo.swf
Size 18.5MB
SHA256 cf80ed1cb281d9b0bfcb99c6e61967fa01c412fe6bdda3015ef8e853a710336a
MD5 1542b83d57d81fe0405a1f163f64609f
SHA1 1232ad5fc92b1ffdbb9e98d77cd5f2a6a651dc87
SHA512 5cda5a4aa58954c6d2ee44ef8022f87dcff47bd3901676b0ffe279bd2ff560c640c643a298ca24b0e3a48e34aa44bd8e7579ffcf15858ef8a851fb51db514655
SSDEEP 393216:fR5OlAGE5jxhNc4uaEy0sh4OQpbVPyVd8ywDhchijannRQ:fR0zEpSh5N5y8/Dwi+nnRQ
TLSH
T169173334576971119FC5EAA72CBA99786B1CBA14C3AF3C68234B61C22F41DDD394CE43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QualitySetting.sxx

Path /data/data/air.com.flipline.papassushiriatogo/com.flipline.papassushiriatogo/Local Store/#SharedObjects/QualitySetting.sxx
Size 53B
SHA256 aee646c3b3b93398013558c8ff83f509e90206c559531416612e65968acd36fb
MD5 4f3ab808b76873c575d15d9e00b6c21d
SHA1 62a88ab40f58a418a9ae8f91f720244ca9b2d56a
SHA512 872c56ca4923c9b2219920a601fb463fb714119873a709bea79bdde8aca7d368e9e61d42cfcbb53152d02960f0e3e7fcb6985b798fe06c4f9c9999811f00c41a
TLSH
T1239002C852644427F2250070F1AC130854A20894417F505049061A90D4045C1A242911
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads