BMW Key Fob Mobile ...
 
Notifications
Clear all

BMW Key Fob Mobile Phone

12 Posts
6 Users
0 Likes
1,064 Views
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

AKA an a**e phone.

If anybody does not know about them, here is a link (and you can even buy one legally)

BWM Key Fob Mobile Phone

We have just received one of these and wondering if anybody else has seen or done one?

Rumour is that it is the dreaded "manual download"! I'm hoping that is not the case, we have yet to tackle it. We have Chinex as I think its safe to assume this is a chinese phone, albeit, not a clone.

If nobody has seen one yet I will happily update with findings when we get the battery charged, but if you have, any pointers much appreciated.

Thanks.

PS.

For those wondering, yes its been up and bottom and yes it stinks 😯

 
Posted : 17/01/2013 7:21 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Never seen one, but the "platform" is (strangely enough) specified on the ebay page

Platform MTK MT6252A

There are a whole set of "car key" low-cost China phones here
http//www.kakatech.com/category/girl-lady-phone/
Ferrari, Audi, Mercedes, Porsche, Bentley besides BMW.

This is the same one seemingly
http//www.kakatech.com/mini-key-handset-phone-bmw-x6/

The "platform" should be enough to check if it is supported by your tools.

jaclaz

 
Posted : 17/01/2013 9:51 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Thanks Jaclaz,

I will check the platform, we have had many MTK devices in (I did have a farrari phone once)

Thanks for the link, great help for getting started. D

4R

 
Posted : 18/01/2013 3:20 pm
TomP
 TomP
(@tomp)
Posts: 36
Eminent Member
 

XRY contains two MTK phone extraction profiles that you can find manually that may help you. There are also a number of other chinese handsets that you may be able to use to extract data but I have always had success with the generic profiles. I would suggest 100% verification for the extracted data. In my experience these phones don't ever seem to contain much in the way of live data as users tend to share one handset between multiple SIM cards.

 
Posted : 21/01/2013 3:32 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Hi TomP,

We used the generic XRY MediaTek profiles, but nothing.

This is where we are at so far

We did Chinex and even went out and bought a Volcano Box what does the MT6252 baseband. We have managed to get physical dumps, the full 8MB file (although Chinex / Physical Analyser reports it just as NOR and not NAND flash.

However we can't decode it. There are some IMEI folders etc. and we can retrieve the images from the device (BMW pics) but thats it. We can't get the IMEI number, contacts, calls, messages etc…

And bare in mind, this is on a test phone we got from eBay, so we know what the IMEI is and that there is info on there. Text/string searches find nothing.

Using this Volcano Box it has IMEI options, when it reports the IMEI back to us using the Volcano Tool v1.1.9 it says its 00060000000006 and its not, because again doing *#06# told us what it is!

So basically we have what i am going to assume is a full download as the whole capacity is 8MB and the bin file is 8MB! But its all junk. We need to decode it. I've been Googling this morning, but not come across anything yet.

Does anybody know what format this data is in? We have a 7Bit GSM string extractor, but its all random junk again. IMEI is the main thing we want. As TomP mentioned, there is probably not a lot on device (can't do *#06# on original as screen is damaged)

Oh, the .bin file has been loaded into Physical Analyser and XACT.

I know I'm probably clutching at straws at this stage, but I feel I have got to be close…

Back to googling….

Thanks.

 
Posted : 22/01/2013 6:04 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

This thingy here is said to be compatible
http//www.et-box.org/
http//forum.gsmhosting.com/vbb/f596/08-12-09-uct-et-china-tool-v1-02-released-everything-u-need-china-phones-876315/
http//www.et-box.org/ET_ChinaTool.pdf

(at least limited to getting the IMEI)

As well as this one
http//sigmakey.com/Sigma-Overview/MTK.html
http//sigmakey.com/Sigma-Overview/MTK.html#IMEI

More loosely, if all it is needed is the IMEI, haven't you considered doing a repair of the screen (by transplanting a new one)?

jaclaz

 
Posted : 22/01/2013 8:11 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Thanks jaclaz.

I will gove those links a look.

And yes, a transplant is an option, prob the last resort, not so much the effort but literally handling the thing (it is disgusting as it sounds…!) We had to sterilize the cables we already plugged into it! |

Hopefully we can get the IMEI through other methods. Plus its a good learning exercise!

 
Posted : 22/01/2013 8:45 pm
TomP
 TomP
(@tomp)
Posts: 36
Eminent Member
 

I don't envy you. I have worked on a few phones from prisoners and am always very apprehensive. There are only so many orifices that a phone can be smuggled into a prison in.

 
Posted : 22/01/2013 8:50 pm
(@rjudy55)
Posts: 17
Active Member
 

..

 
Posted : 26/01/2013 3:17 am
(@horking)
Posts: 10
Active Member
 

I know the eDEC TARANTULA do the cellphone by CPU of MTK\Spreadtrum\Infineon\Mstar good,and it can decode the .bin very well. you can visit the websitehttp//edecdf.com/about

 
Posted : 28/01/2013 1:06 pm
Page 1 / 2
Share: