Analysis
- max time kernel
47s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
04/08/2026, 15:07
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
callbacksms-1.2.2.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
callbacksms-1.2.2.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
callbacksms-1.2.2.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target callbacksms-1.2.2.apk
- Size 16.9MB
- Sample260804-shtb8scf73
- SHA256 353ec8452759f7423dc9313d3aef3961fc982e073e2a7bfcc791cb536683bca2
- MD5 e8de511b4565780617eae905b424c4e8
- SHA1 2035ec2ccb98d620ea595e4ff9cf0e916087bee9
- SHA512 43845fa2d3c5a0697881616130a645d4fd52c629282d3519e2fe5bcce5e387bf777223457bb5a08d27040331a40b1359200d3ef93bc09aa66ec3f08a96916691
- SSDEEP 393216:4YMwNOiMrq5LDNg/jJQFnzSDEVJ9Wpe1bgVXgwQZoz4kNMFkTAQt1eDl:lxNO/uRd9efgwQaFMFkUQts
- TLSH T1EA073306B7A99E2FC433D0314C0A96664516EDA3CB53CB87E838335C29BFAE44F552E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.sales.callbacksms