Analysis
-
max time kernel
3746504s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
23-01-2023 15:46
Static task
static1
Behavioral task
behavioral1
Sample
com.easyapp.collage.phmaker_20_apksos.com.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
com.easyapp.collage.phmaker_20_apksos.com.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
com.easyapp.collage.phmaker_20_apksos.com.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
com.easyapp.collage.phmaker_20_apksos.com.apk
-
Size
11.5MB
-
MD5
0dd51dad6fed0c4e0ca4a451a327b0e9
-
SHA1
f6b3549a0985ddc46f327474c5d909d093030c44
-
SHA256
4d3622c5a47fee261c83a89980eaba8c2a01fb63c8bfd18525c60342786c4f42
-
SHA512
7d9f887017f241730df2a49c3d8e6809b7c7cf8b4ff9b19b243a925cf49ab516bf249f6a3bbbefbca77eee4d598dab86d8790a1c4347c078f4952a510483ea79
-
SSDEEP
196608:CKcDsn2rPkCFmce2APZtPahwtkvSVkSPMAJ6IlAPa:CKAsn2rPXFmDDPPPaw5lP7pAPa
Malware Config
Signatures
-
Loads dropped Dex/Jar 5 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.easyapp.collage.phmaker/[email protected] 4769 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4769 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4769 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4769 com.easyapp.collage.phmaker /data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm 4769 com.easyapp.collage.phmaker -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.easyapp.collage.phmaker/[email protected]
Filesize13KB
MD5665767f2c11ef8f609ed38bf23d5db97
SHA1cf7ee39599a508e83a9dc49e55c48bc8c2846591
SHA256dca2d34d6881cfa25c089d49e7f0e4b4fed7851e8443eae4ac3ddf9b4fa5107b
SHA5124353f7c251a065fbd28ee71b1d0193b2cd2e8f57d2ef6e2bc6a1b7be65fb01f4415b14a8303970f183ee02635b97b0a3f26df22fa5ee58f722ec7895db907511
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
Filesize
26KB
MD53e314b1a29a1fa6ec13b1ff61e491df3
SHA1b3aab4df657ca4bb2b44407fbc770433bb44affa
SHA2565b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
SHA5123e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4
-
/data/user/0/com.easyapp.collage.phmaker/oat/x86_64/[email protected]
Filesize168B
MD5171bb990e39aeac8f24cb16299fc6de8
SHA1b2091cc36fb2c3e443d4e5dd0f6276696dd33da5
SHA2569a5aee1e02b11f454a96b5e65f66ad75a9c172bd555e6c82d12c8b20748272a8
SHA512a557f117c8dbd95937ce20f4e78b22e6f5c5e04f64657d3535d85af9bf78644e6da947ef1bcca0d9bdce55d8dfa7479a78f9910f4f9c2780f29f65869684c843