General
- Target PhoneFarm-Controller.apk
- Size 3.9MB
- Sample260805-ew7j5avyb1
- SHA256 ba9967c9655c062b26ac1a4d14a43d297c7eab392ca7dfa0b5d6880f8ca7fd17
- MD5 4faa67ad7e0e662851e32a5f886c48b3
- SHA1 3b14528de25f7566f22d99e548b4467bd9420d1d
- SHA512 0155000f36136e6f9eeff7c95625158df0251a3c61a6181c1f47a7eaa921f72421f841510ef45a19ee5fc5dcc7d88511c10b0a2e99de6ef0ef5100a63e3c8473
- SSDEEP 98304:936vLq6J62eDJg/1xX7cEJjKwblHionmkvgy319sV9o0XCrpseqOd8b:9qPwK9xJjKIBuyc9gpxi
- TLSH T17B161241F3E8AD2FDC7381324BBB463A41868D56C642C7478969B22C5D7BAC44F86FC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
PhoneFarm-Controller.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
PhoneFarm-Controller.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
PhoneFarm-Controller.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target PhoneFarm-Controller.apk
- Size 3.9MB
- SHA256 ba9967c9655c062b26ac1a4d14a43d297c7eab392ca7dfa0b5d6880f8ca7fd17
- MD5 4faa67ad7e0e662851e32a5f886c48b3
- SHA1 3b14528de25f7566f22d99e548b4467bd9420d1d
- SHA512 0155000f36136e6f9eeff7c95625158df0251a3c61a6181c1f47a7eaa921f72421f841510ef45a19ee5fc5dcc7d88511c10b0a2e99de6ef0ef5100a63e3c8473
- SSDEEP 98304:936vLq6J62eDJg/1xX7cEJjKwblHionmkvgy319sV9o0XCrpseqOd8b:9qPwK9xJjKIBuyc9gpxi
- TLSH T17B161241F3E8AD2FDC7381324BBB463A41868D56C642C7478969B22C5D7BAC44F86FC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).