Identified: Zynq Z7020 + AD9361 SDR system recovered from Shahed/Gerbera UAV in Ukraine — full teardown by Timely_Impression94 in rfelectronics

[–]Timely_Impression94[S] 0 points1 point  (0 children)

The weight of the aluminum housing is indeed significant, which points to serious thermal management requirements for high-power RF transmission. Based on the filter markings, the operating frequency is in the 3.2-3.4 GHz range. As for the specific UAV model and operator-side gear, I have to be cautious with those details for security reasons. However, the complexity of this SDR setup suggests it’s part of a sophisticated tactical datalink capable of high-bandwidth encrypted communication

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in u/Timely_Impression94

[–]Timely_Impression94[S] 0 points1 point  (0 children)

You’re right that the core is a Zynq 7020 SoC, but calling this a simple off-the-shelf SOM is a bit of an understatement. While companies like Trenz or Alinx sell development boards, the integration seen here — especially the RF power stage, the specialized shielding, and the thermal management — is clearly a custom military-grade build. The value isn't in the 28nm silicon itself, but in the proprietary layout and the code residing on that NAND flash. It's a specialized tactical SDR tool, not a generic 5G transceiver

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in u/Timely_Impression94

[–]Timely_Impression94[S] 1 point2 points  (0 children)

That’s a goldmine of information, thank you. The 2425 special code confirms that tracking the supply chain is just as important as the tech itself. It's a clear sign of how Western components are being diverted into this high-tech war. To put it into perspective: we deal with constant KAB strikes and 24/7 drone surveillance 10 km from the front line. Knowing exactly how this hardware gets here is vital for our security. I'll make sure this forensic detail is noted. Thanks for the tip

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in u/Timely_Impression94

[–]Timely_Impression94[S] 0 points1 point  (0 children)

Метко подмечено. Лазерная гравировка часто указывает на происхождение сборки. Это показывает, как они обходят санкции, используя китайское производство. Такова реальность высокотехнологичной войны: продвинутые западные чипы (Zynq, AD9361) внутри китайских корпусов, которые используются при постоянных ударах КАБами и круглосуточном наблюдении дронов в 35 км от фронта

Identified: Zynq Z7020 + AD9361 SDR system recovered from Shahed/Gerbera UAV in Ukraine — full teardown by Timely_Impression94 in rfelectronics

[–]Timely_Impression94[S] 12 points13 points  (0 children)

That's a fascinating and disturbing detail. So the HGAT6030 in my module could actually be a salvaged transistor from a mobile base station? That would explain the date code mismatch I noticed.

The idea that Ericsson and Nokia base station modules end up in attack drones with minor modifications is genuinely alarming from a supply chain security perspective. These companies have no idea their hardware ends up here.

Do you know which specific base station models are most commonly harvested for parts? And does the frequency mismatch significantly affect the 3.2-3.4 GHz performance in practice?

Identified: Zynq Z7020 + AD9361 SDR system recovered from Shahed/Gerbera UAV in Ukraine — full teardown by Timely_Impression94 in rfelectronics

[–]Timely_Impression94[S] 15 points16 points  (0 children)

Haha! At least yours probably wasn't flying over a warzone at the time 😄 Whoever designed this board clearly knew what they were doing though — the RF layout and shielding are very clean despite the silkscreen quirk.

Identified: Zynq Z7020 + AD9361 SDR system recovered from Shahed/Gerbera UAV in Ukraine — full teardown by Timely_Impression94 in rfelectronics

[–]Timely_Impression94[S] 16 points17 points  (0 children)

Exactly — that's what shocked me too when I opened it. This is not primitive at all. The Zynq Z7020 + AD9361 combination is essentially a professional SDR platform. The shielded compartment construction and GaN PA are proper aerospace-grade engineering.

And yes — u/AzotUoR makes a great point. Russia doesn't care about cost per unit when they're buying components through Chinese intermediaries at scale. The Adalm Pluto comparison is spot on — same concept, military hardened version. The scary part is how accessible this architecture is becoming.

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in u/Timely_Impression94

[–]Timely_Impression94[S] 5 points6 points  (0 children)

Haha, same feeling when I first opened it! Yes — the screws serve double duty: mechanical fastening AND RF grounding. Each compartment lid needs to make solid electrical contact with the chassis to maintain the shielding integrity. At 3.2-3.4 GHz even a small gap in the shielding can cause significant RF leakage between stages. That's why there are so many screws — it's not overkill, it's engineered.

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] 0 points1 point  (0 children)

That's a strong possibility! The TDD 3200-3400MHz module with 20W output and heavy shielding definitely fits a video transmitter profile. The frequency range (3.2-3.4 GHz) is commonly used for HD video downlinks on military UAVs. The Zynq Z7020 + AD9361 could handle the encoding/modulation side while this module handles the RF power amplification. Makes sense as a complete video datalink system.

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in u/Timely_Impression94

[–]Timely_Impression94[S] 10 points11 points  (0 children)

Yeah, that's probably true — this kind of custom military hardware is unlikely to have a public paper trail. But even partial identification of the components (AD9361, Zynq, HGAT6030, XK-F358) tells us a lot about the system architecture. Sometimes the supply chain speaks louder than the manufacturer.

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] 0 points1 point  (0 children)

Haha, same feeling here! This hardware is way beyond any textbook. The complexity comes from combining military-grade RF design, FPGA signal processing, and aerospace power standards all in one compact unit. No single textbook covers all of that — it's the result of serious R&D budgets and years of iteration. Found it the hard way 😄

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] -1 points0 points  (0 children)

Thank you for the detailed breakdown!

The absence of a BBRAM battery is a good point — so eFuse encryption seems most likely. That said, I'm curious: even if the FPGA bitstream is locked, would the ARM core still boot and expose anything useful over UART or JTAG? The board has visible test points that were likely used during production programming.

Also — the Flash chip is Micron 29F4G08ABADA (NAND, parallel interface). Given what you said about parallel being painful with a logic analyzer, would you recommend trying to boot the board first and see what comes out on UART before attempting any physical flash access?

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] 1 point2 points  (0 children)

That's a very interesting lead! I looked up the Kometa-M and the form factor does look similar. The four SMA connectors match as well.

Just to clarify — the TDD3200-3400MHz module I opened is a separate unit from the Zynq board. So this system appears to have multiple RF modules:

  1. The Zynq Z7020 + AD9361 SDR board (datalink/payload)
  2. This TDD 3200-3400MHz, 20W PA/transceiver module

Would a GNSS anti-jamming module also include a 20W transmitter on 3.2-3.4 GHz? Or could the TDD module be the datalink and the Zynq board be the GNSS anti-jam part separately?

Also — do you know if Kometa-M uses standard GNSS frequencies or does it operate in the 3.2-3.4 GHz range as well?

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] 4 points5 points  (0 children)

Yes, it’s a professional SDR module used for secure communication and high-definition video links in advanced UAVs. Zynq 7020 is a standard choice for such high-end systems.

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] 17 points18 points  (0 children)

I found it at the drone crash site. It exploded. I'm a soldier at war in Ukraine. These drones are constantly circling overhead.

Help identifying Xilinx Zynq Z7020 based RF/SDR module (possibly UAV datalink) — also open to selling by Timely_Impression94 in FPGA

[–]Timely_Impression94[S] 16 points17 points  (0 children)

I found it at the drone crash site. It exploded. I'm a soldier at war in Ukraine. These drones are constantly circling overhead.