General
- Target PhoneFarm.apk
- Size 3.9MB
- Sample260805-k7a8ysterf
- SHA256 cdfd8e3f544d6f720896d8d0567e9be88461b4eaf00499a276f775541e2c4c5c
- MD5 749dcf9c282149e495d9d3ad56eb88b6
- SHA1 594a230ca8d4bab3746665d702ca0183f4ac50bc
- SHA512 605032bb34207275e43fffe93753ff8f56a53b3effa8e694ccd6ad1f26be8bacec8b5aa1edbd9c59ae9505eb5cb8ee77d0fa092a75dc67318007b4acd5511b78
- SSDEEP 98304:936vLq6J62eDJg/1xX7cEJjKwblHionmkvgy319sV9o0XCrpseZOd/d:9qPwK9xJjKIBuyc9gpq1
- TLSH T19F161241F3E9AD1FDC3381324BBB463A41868D56C642C7478969B22C6D7BAC48F86FC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
PhoneFarm.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
PhoneFarm.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
PhoneFarm.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target PhoneFarm.apk
- Size 3.9MB
- SHA256 cdfd8e3f544d6f720896d8d0567e9be88461b4eaf00499a276f775541e2c4c5c
- MD5 749dcf9c282149e495d9d3ad56eb88b6
- SHA1 594a230ca8d4bab3746665d702ca0183f4ac50bc
- SHA512 605032bb34207275e43fffe93753ff8f56a53b3effa8e694ccd6ad1f26be8bacec8b5aa1edbd9c59ae9505eb5cb8ee77d0fa092a75dc67318007b4acd5511b78
- SSDEEP 98304:936vLq6J62eDJg/1xX7cEJjKwblHionmkvgy319sV9o0XCrpseZOd/d:9qPwK9xJjKIBuyc9gpq1
- TLSH T19F161241F3E9AD1FDC3381324BBB463A41868D56C642C7478969B22C6D7BAC48F86FC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).