Analysis
- max time kernel
47s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
02/08/2026, 05:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
fieldforge-beta-1.0.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
fieldforge-beta-1.0.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
fieldforge-beta-1.0.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target fieldforge-beta-1.0.apk
- Size 9.0MB
- Sample260802-fxca2sdl7z
- SHA256 d0b96f5ce6df3b745ef892187a7cb7128882bd2eab4685d6d1993e378e16b191
- MD5 3e7bca6e9d4a5e475b78d247d019677a
- SHA1 39c68dd241ed1a6722111ea28ee4852090c1397e
- SHA512 8ce07271c3d65cf60e64407b027363905b5d967603ff79642b2a2aa364d7e4f31ae43da1b500702a0413af9c36731b39a29f86f2006c5efdd2083bbab5bffc0e
- SSDEEP 196608:I7MISNcdzqDlPcpT0NlUn/55cnBi8XOCq1guiO:bhKqDlBq/5oBiQOCq1guiO
- TLSH T1AD962342F3E8AD1FCC7780320BAA1736524A8C96CB42D3479958735C6DBBAD44F95BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.fieldforge.farmos - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.fieldforge.farmos - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.fieldforge.farmos