Analysis

  • max time kernel
    46s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    10/08/2026, 23:12

General

  • Target
    aviator.apk
  • Size 1.8MB
  • Sample260810-27a2ma1clc
  • SHA256 839cf0c038811c342d609c840b149682681908e0e29cdaa20631bdf54b9d41b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.tfy.redflight.game
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5093

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.tfy.redflight.game/files/profileInstalled
        • Size 24B
        • SHA256 9c609acab83b30509e4c6f91108ce26f37261f42e437aff5266ad97f8bf7849f
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.tfy.redflight.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 f0b3579abc9fe9c3cd19132ca01a5249cf005b9d47e72488e8fa55e46e0ed91c
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tfy.redflight.game/primary.prof
        • Size 1KB
        • SHA256 03954bef55aace839d86caa939b4637ea1e76bacfe24fd4e69e248b4630f5d29
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.tfy.redflight.game/primary.prof
        • Size 2KB
        • SHA256 3fbe22f1d3c00ccd09dd2c0a021c080e260fc20e5f9a357d328754e58534e26d
        • MD5 SHA1 SHA512 TLSH