Analysis
- max time kernel
32s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
27/10/2026, 00:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FlyffUAndroid.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
FlyffUAndroid.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
FlyffUAndroid.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target FlyffUAndroid.apk
- Size 3.0MB
- Sample261027-bbqt4azzaw
- SHA256 74d2ffebbfc0229c14eb7a05504730dcdf8bc855edc343c6441ccd6666b1777d
- MD5 caa97917920de1b5afd0789be94e4c78
- SHA1 13c18d6332243dc265adca3206a5b20069df2bfa
- SHA512 32e86938141e8d26939284d4fb929885fd636fe00d0faa937aa91961989258d9dc22c4ea36e832cfc8418b74b8dd7d88b57ab4e1ee5d02c9335353384c8ce948
- SSDEEP 49152:IDrwcinUe58Zoafy5BbBnPyQIPuvKl2hZa3xER4zkNpwym1gpezfrPE:2inJIouABbFPUi4zk0BLzfrPE
- TLSH T163E5E086B7586A3FC8B70033096A5336267ACD168B839747795C362C6C776EC0F59BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.droidev.flyffuwebviewclient - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.droidev.flyffuwebviewclient - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.droidev.flyffuwebviewclient - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.droidev.flyffuwebviewclient - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.droidev.flyffuwebviewclient