Analysis
- max time kernel
6s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
14/10/2026, 12:19
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
sms-forwarder.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target sms-forwarder.apk
- Size 1.1MB
- Sample261014-phancavthy
- SHA256 80ed1e5364a3c7106d5f6d61fbcd68ac85dcb4a936ca44192f798c1eb5260962
- MD5 dd519285bec5cbf0522a37da667d5188
- SHA1 8f1243d98b532f737e54bdec78f18b7498a6ca91
- SHA512 234442842dc1362e389fd8091e569c769fa090faf102f27c91ea0ae77b7371c1d773a6b153fd296091536e892dd657d492d394a366c8f8375f115e054f66dbf2
- SSDEEP 24576:VpM4qk8v1Jez24vcKBXpeGmqrFnli82XNyXd:bMXdl+cPqvie
- TLSH T159451241B396DA9ECC3285354D1ACA7A1661BC238E028757F5283B2DBCB77E05F913E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4764 cn.maoertech.smsforwarder /system_ext/framework/androidx.window.sidecar.jar 4764 cn.maoertech.smsforwarder
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/cn.maoertech.smsforwarder/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 15cf0931f1d274d7073e035c476a95ab128fc0ca51de0226407392784cecbd5d
- MD5 6be718a253628d9adad6f6c6b3279134
- SHA1 9b0c2848c087545ba9dc119fcddea8b06429fabe
- SHA512 50db29b282266658a4cd37394e8afa1c58c93accc33c346c4508f0943ff7745eb3c01db33e6fa98ce270878a94a1a7a264eb16b799f86191b5a0052cc61a40a0
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/cn.maoertech.smsforwarder/primary.prof
- Size 5KB
- SHA256 a8083b855dc1afbcdf4a1aef0a3341e15ee7a02ce3ac82a4ddcff7887b07f958
- MD5 bd68d4358e1607fa00f7c191262e0a71
- SHA1 76033929646077c5e6688a66db57069c2d7adba4
- SHA512 eb78cb817b6dfad8eca7cb51a06a3121567957c8d8859d61f5e647da2c629fd2eadacd302e566ca53510f640fb66dd4d426c230a066c8d9c7dc12e0a10865712
- SSDEEP 96:G69WBWgr1A35pWEHBtGe0NWxbi2YFRmyvht79GQ0WKvhxRjpjFaWqPWeAAdMaD85:G69WDyzWfe0UJiJyjb231dfgV3
- TLSH T17CC18CCD10DE24F5C732BDE6649C428BDAB882D1DC1398E38C9D384A6975CEB5712948
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH