Analysis
-
max time kernel
3732454s -
max time network
160s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
23-01-2023 11:50
Static task
static1
Behavioral task
behavioral1
Sample
Easy Photo Collage_2.0.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral2
Sample
Easy Photo Collage_2.0.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral3
Sample
Easy Photo Collage_2.0.apk
Resource
android-x86-arm-20220823-en
General
-
Target
Easy Photo Collage_2.0.apk
-
Size
11.5MB
-
MD5
0dd51dad6fed0c4e0ca4a451a327b0e9
-
SHA1
f6b3549a0985ddc46f327474c5d909d093030c44
-
SHA256
4d3622c5a47fee261c83a89980eaba8c2a01fb63c8bfd18525c60342786c4f42
-
SHA512
7d9f887017f241730df2a49c3d8e6809b7c7cf8b4ff9b19b243a925cf49ab516bf249f6a3bbbefbca77eee4d598dab86d8790a1c4347c078f4952a510483ea79
-
SSDEEP
196608:CKcDsn2rPkCFmce2APZtPahwtkvSVkSPMAJ6IlAPa:CKAsn2rPXFmDDPPPaw5lP7pAPa
Malware Config
Signatures
-
Loads dropped Dex/Jar 5 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.easyapp.collage.phmaker/[email protected] 4732 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4732 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4732 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4732 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4732 com.easyapp.collage.phmaker -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.easyapp.collage.phmaker/[email protected]
Filesize13KB
MD5665767f2c11ef8f609ed38bf23d5db97
SHA1cf7ee39599a508e83a9dc49e55c48bc8c2846591
SHA256dca2d34d6881cfa25c089d49e7f0e4b4fed7851e8443eae4ac3ddf9b4fa5107b
SHA5124353f7c251a065fbd28ee71b1d0193b2cd2e8f57d2ef6e2bc6a1b7be65fb01f4415b14a8303970f183ee02635b97b0a3f26df22fa5ee58f722ec7895db907511
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
/data/user/0/com.easyapp.collage.phmaker/oat/x86_64/[email protected]
Filesize168B
MD5ce2e7f5a7ee238a68c90e2f5d2d8e565
SHA106cb396ef5efeadd2a787c349ab9a6de053426a9
SHA2566463e10455027cca39a7723a5f37e79bd9e268e3c33d056cd3d0fc977e374347
SHA5124af945319043829380acb02b178f1700e282f6e0a53d4a0c7afb111d4c216dad7a8ff13c36e75558e8ef5a15b76e7245e924845d794a35e5afc1db48975ebc88