Resubmissions

04/11/2025, 03:26

251104-dy6vyaxrck10

02/10/2025, 20:19

251002-y4bbfavvcx10

General

  • Target
    nfu.apk
  • Size 7.6MB
  • Sample251002-y4bbfavvcx
  • SHA256 e6e60120b3899d8a21ddbaee5a26c2a58e29c6eec51df447890cb83d5b08f40f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • PhantomCard payload 1 IoCs
  • Phantomcard family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

File Explorer

  • nfu.apk
    .apk 7.6MB

nfu.apk

  • SHA256 e6e60120b3899d8a21ddbaee5a26c2a58e29c6eec51df447890cb83d5b08f40f
  • MD5 SHA1 SHA512 SSDEEP
  • PhantomCard payload

blpmeg.ouomhn.awshpu

Android Permissions

nfu.apk

Permissions

android.permission.NFC

android.permission.NFC_PREFERRED_PAYMENT_INFO

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_EXACT_ALARM

android.permission.VIBRATE

android.permission.SCHEDULE_EXACT_ALARM

blpmeg.ouomhn.awshpu.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION