Analysis
- max time kernel
48s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/08/2026, 05:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
fieldforge-beta-1.0.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
fieldforge-beta-1.0.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
fieldforge-beta-1.0.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target fieldforge-beta-1.0.apk
- Size 9.0MB
- Sample260802-fxca2sdl7z
- SHA256 d0b96f5ce6df3b745ef892187a7cb7128882bd2eab4685d6d1993e378e16b191
- MD5 3e7bca6e9d4a5e475b78d247d019677a
- SHA1 39c68dd241ed1a6722111ea28ee4852090c1397e
- SHA512 8ce07271c3d65cf60e64407b027363905b5d967603ff79642b2a2aa364d7e4f31ae43da1b500702a0413af9c36731b39a29f86f2006c5efdd2083bbab5bffc0e
- SSDEEP 196608:I7MISNcdzqDlPcpT0NlUn/55cnBi8XOCq1guiO:bhKqDlBq/5oBiQOCq1guiO
- TLSH T1AD962342F3E8AD1FCC7780320BAA1736524A8C96CB42D3479958735C6DBBAD44F95BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fieldforge.farmos - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.fieldforge.farmos - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.fieldforge.farmos - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.fieldforge.farmos - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.fieldforge.farmos
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.fieldforge.farmos/files/profileInstalled
- Size 24B
- SHA256 40d385e597ec0d8de487f81954289d8362ff6d2efa911a0ed1eb15778149cff5
- MD5 cffd14a8da26659122fdb5325e040f3c
- SHA1 9916ef27334d52b01113c46ca6e78c3d3a7389d9
- SHA512 80b0beb1679aa2d98c387a5fcbaaafe73c7158c98bbdfa3d0f1475c3e106f1ac0539381efad04ca5d52687d7252c354a1a008b422fa64243d1f06023bc95817c
- MD5 SHA1 SHA512