nfu.apk
- SHA256 e6e60120b3899d8a21ddbaee5a26c2a58e29c6eec51df447890cb83d5b08f40f
-
PhantomCard payload
Behavioral task
behavioral1
Sample
nfu.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral2
Sample
nfu.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral3
Sample
nfu.apk
Resource
android-x64-arm64-20250917-en
| resource | yara_rule |
|---|---|
| sample | family_phantomcard |
| description | ioc |
|---|---|
| Required by NFC services to bind with the system. Allows apps to interact with NFC hardware. | android.permission.BIND_NFC_SERVICE |
| description | ioc |
|---|---|
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
| Allows applications to use exact alarm APIs. | android.permission.SCHEDULE_EXACT_ALARM |
PhantomCard payload
android.permission.NFC
android.permission.NFC_PREFERRED_PAYMENT_INFO
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.USE_EXACT_ALARM
android.permission.VIBRATE
android.permission.SCHEDULE_EXACT_ALARM
blpmeg.ouomhn.awshpu.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION