fdca613d64dde6eec56b679ecdb607fd16c72b66f6b5dba9f4f8e19523e7fa24 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

AEROFORGE.apk

android-13-x64

7

AEROFORGE.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
AEROFORGE.apk
Size 464KB
Sample261101-xa6d2set5j
SHA256 fdca613d64dde6eec56b679ecdb607fd16c72b66f6b5dba9f4f8e19523e7fa24
MD5 53c5afa30148fa9faa0ff1608135531b
SHA1 a15c7b00d83fe4df8180db7f885240e63f5336e8
SHA512 2c4ef3af3f58e638a34e23d1d010691fe7d737eed4146df92e1782dd39f56e88d1e204fbe2cba1588d40ba7a0f23b9c341e936a7836a01ac25b3854a6d3179a6
SSDEEP 12288:yVmqlVWs464s2rOgw/ib5ZD490u0N/oI4fb:yjKs4NYADV/Fc
TLSH
T160A42318B7A957E5F146CCF410E6F462047F39962D00D4CFB7B2884BD66C4F987EA88A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android collection credential_access impact

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AEROFORGE.apk

Resource

android-33-x64-arm64-20260708-en

android-13-x64

4 signatures

150 seconds

collection credential_access impact

Behavioral task

behavioral2

Sample

AEROFORGE.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

4 signatures

150 seconds

collection credential_access impact

Malware Config

Targets

- Target
  AEROFORGE.apk
- Size 464KB
- SHA256 fdca613d64dde6eec56b679ecdb607fd16c72b66f6b5dba9f4f8e19523e7fa24
- MD5 53c5afa30148fa9faa0ff1608135531b
- SHA1 a15c7b00d83fe4df8180db7f885240e63f5336e8
- SHA512 2c4ef3af3f58e638a34e23d1d010691fe7d737eed4146df92e1782dd39f56e88d1e204fbe2cba1588d40ba7a0f23b9c341e936a7836a01ac25b3854a6d3179a6
- SSDEEP 12288:yVmqlVWs464s2rOgw/ib5ZD490u0N/oI4fb:yjKs4NYADV/Fc
- TLSH
  T160A42318B7A957E5F146CCF410E6F462047F39962D00D4CFB7B2884BD66C4F987EA88A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

collectioncredential_accessimpact

behavioral2

collectioncredential_accessimpact

© 2018-2026

Terms | Privacy