Analysis
- max time kernel
8s - max time network
11s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
- submitted
01/11/2026, 18:40
General
- Target AEROFORGE.apk
- Size 464KB
- Sample261101-xa6d2set5j
- SHA256 fdca613d64dde6eec56b679ecdb607fd16c72b66f6b5dba9f4f8e19523e7fa24
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Checks CPU information 2 TTPs 1 IoCs
- Checks memory information 2 TTPs 1 IoCs
Processes
-
com.aeroforge.game1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information