839cf0c038811c342d609c840b149682681908e0e29cdaa20631bdf54b9d41b7

Analysis

max time kernel
22s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/08/2026, 23:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aviator.apk
Size 1.8MB
Sample260810-27a2ma1clc
SHA256 839cf0c038811c342d609c840b149682681908e0e29cdaa20631bdf54b9d41b7
MD5 882d84d9d5c9d256b130a2aae4ef0079
SHA1 a3c5d11a9f4f99d366c592ce2a66636855194171
SHA512 be663f40bb0bb237192f3c6ebe4464da75685e11f318806926f49c362621af51df36a8ff293c1c93db4aa2d5e02747de733dc17af1b6f4b1627df45e27e48853
SSDEEP 49152:izqPGswvl0eifYt73yJORsDfG9f4O/g0O3JGr:iznZvOeiQtfR0fgf4CO3JGr
TLSH
T11F85BE86BF15953FC8B604330BAA527536678D028E839B477588372C6DB76C84F5AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.tfy.redflight.game

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tfy.redflight.game

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.tfy.redflight.game

com.tfy.redflight.game
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4743

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.tfy.redflight.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 c98b4e65535c5f0ce9b4ea1c8a9a269ab14a1655bdf3ff33e092ddca705ac8af
MD5 d233737d8e84f5c0b09739d7f6df3ef7
SHA1 08c407473417d41c1a8fdf30af056f3da5c95330
SHA512 b26789595e78a745a8bfbb967105245106bfaa6f48e169787934c4cd37658b7d23b5769ee118430079d6ef81b260746fc9faccac80a58f7d29f166bcfa7d9486
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.tfy.redflight.game/primary.prof
Size 1KB
SHA256 03954bef55aace839d86caa939b4637ea1e76bacfe24fd4e69e248b4630f5d29
MD5 63007bf205e95aa236bd61aae0d0b668
SHA1 b9253a1d8c9e92d1ad1c52ff6b544ba9acba93cc
SHA512 c7730a17c22d59b08d277407f26d9724cbd4a699bc4fa744f26d8caefcd96a9679125658a3834e4455c562e84a024a3678a5b5bc95d953c04f7c0bfa2412f3bd
TLSH
T1D52163264556EBA30D70003C802C57A5068A55F7A8ABD6F34D20609A8FA54D68BC6AD1
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads