Analysis
- max time kernel
11s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260721-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system - submitted
13/11/2026, 12:17
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
field-watch.apk
Resource
android-x64-arm64-20260721-en
1 signatures
150 seconds
General
- Target field-watch.apk
- Size 13.6MB
- Sample261113-pgdnlsvv7l
- SHA256 cea1685ed129ee7cd0d5973ccb4687572312af865dc16bffe0719b2a44abd373
- MD5 912abf43af1c631c14c44e85fa02f72f
- SHA1 e82024759e66fda8c1de572eae704c1e976041d8
- SHA512 40ce2780228462c09620623e1ae13e6942b7231ddc8b29fdfef0f9e05eb2c57cf1a4d3ffdd3d904ab554b6b6a83084fd80ff7689631bdf9f410b9dfb6c07ba5a
- SSDEEP 196608:Q3fGqh2usgjUmGOED+xLnslV91kZpVDWr4fcvfcA+ghe9K2F1bgE+jY:Q3fcusZmbEDIs/epVDW0fcHu9fbVR
- TLSH T195E6E089F71A047EDCB7A438851B8332A5277C0A4722C6D79658FA14BE736E08F3D794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.sovereignops.fieldwatch
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.sovereignops.fieldwatch/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 e939d04fed6fb391ffa46ccc6eda4b95e87e0e28163af70340619f67cee2d228
- MD5 f495beef5e5ee2d1df548ec3e6647b6f
- SHA1 9948323e34807a7007abc3ba9bab4a1e87fda81c
- SHA512 ae82923ed3bdb550740c1fe40ff975a12ec858422455db05f5a4b2c199df9f2fa0771e3f1b8efad32889753dc0c54450bae72119ea519491b8c8f794cfce720b
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.sovereignops.fieldwatch/primary.prof
- Size 2KB
- SHA256 29ba387ec45c3d8068bb5349a3e8859520c1e65693ef00a777da9313b3a292bf
- MD5 a781e196efae7c33280d6cd72e9ee904
- SHA1 493a46a05cd366de03afe0f9b12fac7098906e7e
- SHA512 6f384e442f7d183c566742ee8f6226427c0671928689fb7e6809dd73e2878f2ebf8c9ebcff45b6be6a31854b18e55facb079aa6ff650f13cba2b29f82e66e16f
- TLSH T1A9515AE088E04E059A7F84A469471BE20CBCE18E1BF0BDADD9BDF3710C15A7A69408F1
- MD5 SHA1 SHA512 TLSH