Analysis
- max time kernel
110s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
25/08/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
callmate-android.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
callmate-android.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
callmate-android.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target callmate-android.apk
- Size 18.4MB
- Sample260825-pg4vsssakh
- SHA256 dfa3a753d7e0f378ee5aebd1ef4ae4d76410ed13589f4b02c84b34def82ecfad
- MD5 cd1d41cd047c71fa632942b3aef801b3
- SHA1 09f212a1cde15fb92fc0f17e51d00d1a56315c00
- SHA512 3920a6cc5b5c0f6b553fc8e95d022d3d5430119e6528cd9913059891b9a2de54d61d8a1e8c0a132f0fdd80d8bab117cb535bc26d0f4794bc5acea55b6c3a71c2
- SSDEEP 393216:FVeRjRP6wh9RzXwJkcuRBvBWXZ9gWXZ9EXSh1q84fqMRrwuTGjjc:F4HiwHdwacS9kpHpRXqNqMRHTGj4
- TLSH T1D1172353E3938E1EED778A328F8226241A40BC1CEA92D60F35487E2DE5777C02E657D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.callmate.ai - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.callmate.ai - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.callmate.ai - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.callmate.ai - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.callmate.ai
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.callmate.ai/files/profileInstalled
- Size 24B
- SHA256 debda78b066fdb43fa908d10deda8d4f9a49c334fdb6f6bed25cf4e58b86f855
- MD5 ab01c8a2eda58e8548aa1d7d0cfcc3f4
- SHA1 5e0b2fd82a7ba0555ee11b94cda2d4a43a90d5af
- SHA512 f9b51ac67a165af0f22b0e6057f858b0d4cc189956431891045fc4c278d835f46286af9489ef5b4d1d6ea048d45087e0d7c205c9fd3be813b1625c373a79cb63
- MD5 SHA1 SHA512
- Path /data/data/com.callmate.ai/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 eb7e5c59062444900dc65e0248a3109a5654f1b1d05e21854a6267b07c8300fd
- MD5 4161142beac71dc34fa7fc44059830b4
- SHA1 de713141da1ab69d9403e98424f5d33b1ccafe26
- SHA512 817153558db44ed35f9d781d151d6ebbd24248a1e2c5e781899bbd042f40265c7951cf1d8de6b81a49b6abd273bfa5a718c70df2bec3933f42cb97149e6fbe16
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.callmate.ai/primary.prof
- Size 7KB
- SHA256 60d8d3117261625b29b84fca2e491102aa3ae54f8f455744346bb48d6ab5dc79
- MD5 e2483f453b30604dc70f32ce8f07424c
- SHA1 3182391944348f4d9dec19e89cdf55479eae68c3
- SHA512 8c9e79448cc9e1f5960343630bb23485e4c29d538854b067216756aa652a43e95b35492bdfcb68db369e4b653769b1f95322a2fb118a5ce5853456bf4f46498e
- SSDEEP 192:n+/RqqL05kst8/wPMMDhuqezPq42Pqm0O:n+/RDikJ/wPMMDhuqeY
- TLSH T144F17D2F44D12B4559B787C6DC324B9EA3347A4636E6962590F90C036FAB50FBC98CE4
- MD5 SHA1 SHA512 SSDEEP TLSH