Overview
overview
10Static
static
10Business C...ro.apk
android-9-x86
6Calculator 1.apk
android-9-x86
1Calculator 1.apk
android-10-x64
1Calculator 1.apk
android-11-x64
1Calculator.apk
android-9-x86
1Calculator.apk
android-10-x64
1Calculator.apk
android-11-x64
1Chinese Nu...B).apk
android-9-x86
7Chinese Nu...B).apk
android-10-x64
7Chinese Nu...B).apk
android-11-x64
7Collage Creator.apk
android-9-x86
6Collage Creator.apk
android-10-x64
7Collage Creator.apk
android-11-x64
7Conference.apk
android-9-x86
6Conference.apk
android-10-x64
6Conference.apk
android-11-x64
6Counter-St....0.apk
android-9-x86
6Counter-St....0.apk
android-10-x64
1Counter-St....0.apk
android-11-x64
6c38c675a43...70.apk
android-9-x86
10c38c675a43...70.apk
android-10-x64
10c38c675a43...70.apk
android-11-x64
10chinese_locker.apk
android-9-x86
6chinese_locker.apk
android-10-x64
6chinese_locker.apk
android-11-x64
6com.AngryNeighbor.apk
android-9-x86
1com.AngryNeighbor.apk
android-10-x64
1com.AngryNeighbor.apk
android-11-x64
1com.crazya...er.apk
android-9-x86
7com.crazya...er.apk
android-10-x64
7com.crazya...er.apk
android-11-x64
7com.my.kfc...hk.apk
android-9-x86
5Analysis
- max time kernel
24s - max time network
49s - platform
android-9_x86 - resource
android-x86-arm-20260306-en - resource tags
arch:armarch:x86image:android-x86-arm-20260306-enlocale:en-usos:android-9-x86system - submitted
21/03/2026, 16:50
Behavioral task
behavioral1
Sample
Business Calendar Pro.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral2
Sample
Calculator 1.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral3
Sample
Calculator 1.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral4
Sample
Calculator 1.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral5
Sample
Calculator.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral6
Sample
Calculator.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral7
Sample
Calculator.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral8
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral9
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x64-20260306-en
Behavioral task
behavioral10
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral11
Sample
Collage Creator.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral12
Sample
Collage Creator.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral13
Sample
Collage Creator.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral14
Sample
Conference.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral15
Sample
Conference.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral16
Sample
Conference.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral17
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral18
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral19
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral20
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral21
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral22
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral23
Sample
chinese_locker.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral24
Sample
chinese_locker.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral25
Sample
chinese_locker.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral26
Sample
com.AngryNeighbor.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral27
Sample
com.AngryNeighbor.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral28
Sample
com.AngryNeighbor.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral29
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral30
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral31
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral32
Sample
com.my.kfckfcgrrgihhk.apk
Resource
android-x86-arm-20260306-en
General
- Target Collage Creator.apk
- Size 9.4MB
- Sample260321-vcmnlsbt4r
- SHA256 27cd0366117cc9204121518a0fdb9eeaba8234cda9704bee0c310b1ae7b1bb79
- MD5 de842dd94324492ace8c2c8ebd350bc8
- SHA1 e8c4413af987ec625a8a5dde456d322d4ac106c9
- SHA512 a52965523a83f85b14d1598dc5fbd6e45e28c8f035bb82e622506754b4d61d19253d7b1ba07ecd16d077790dac6c2e22ee38216341ba05fc859949ca3cf2e014
- SSDEEP 196608:1oUx4hGg6rUgE12P2++KsTCJ54eABP6p+3CXdFvHL5BvtRDe+CmFSA5GA1WSFr:dx4hn6rUgG++K74eHp+3UrPL55DBCRA1
- TLSH T1F9A633A2C346FF21E466C5364BB6406F7A110DC05952EB66317EF4225FFFAA0C944F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.changedroid.picture.collage.creator - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.changedroid.picture.collage.creator - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.changedroid.picture.collage.creator - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.changedroid.picture.collage.creator - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.changedroid.picture.collage.creator - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.changedroid.picture.collage.creator - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.changedroid.picture.collage.creator
Processes
-
com.changedroid.picture.collage.creator1⤵
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4229
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db
- Size 20KB
- SHA256 3cf61677b9007e76fbc4a26cac2a76e6b78b0f83247027d3f454b308dde6077a
- MD5 c522180215cd2de0f8f99f1329eefc27
- SHA1 38ec44d456dbbe8c5e269c73f88b3b564509cb4c
- SHA512 f688002c3b33581c4968e9f53f78a407ca792e15d17d5a6187d33372a3645d32db4dff95c6cc1faa93e99be2488ef666715027b436b0aad29b13243da3896edc
- SSDEEP 12:TD0CKl3DWa1lE9OJdekvOf7nRmBEyPbAVOw:TiKa1lbdCwGSE
- TLSH T1A9922BC3C7044A13E58443F2E49553A01DB61ADF46AA93C215511A147D876447467D98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 512B
- SHA256 d1a4e97a99868097f175a0ec41c190eee30a343a0e38db17ee5fa71606491999
- MD5 9e367664200811c2c0a04aade466a838
- SHA1 49bd94228bbb46a85a3de00300d22b141ffb0081
- SHA512 6699f220e630ca9055f278c51761874acd26e7928b24d40919c6481431e2d4e874c8408c349010bd85d0a2fc4d4809dfdaedd36da12aaa98565af319fa8bd3a6
- MD5 SHA1 SHA512
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db-wal
- Size 32KB
- SHA256 b977d90d5cc2d46f4055bef14a8189c1276dc9424a470dec41fb647389b2e229
- MD5 ac548df62897e6f74f1a7ab61892d521
- SHA1 05e01f834b6e5e78d67afd8af3d615ef87105363
- SHA512 f9e37a6f2633626b3036429ade4258eb8e1163460bee185bb885252c69146e242271eab99bea96cb0a4a8ab1e0edaab66ff4a35330f6e682c159af602d66a9af
- SSDEEP 24:K6waBzyGSP/getKgfwviKa1lbdCwGSP/gGQa4:N7BzNSP/geog4v41PCHSP/gGR4
- TLSH T1B3E2DC83C3400A13D15B03F2E1DA839C6FB22ADE8A36C38B27550D247D83B8CA252C6C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/files/INSTALLATION
- Size 36B
- SHA256 6c44e6419db31ea12210808de86b20f5c73c961b83fd9a5b1d66b2751c2071a0
- MD5 55d41d4cb4475046c3ff0bd2b5b5d808
- SHA1 020262c6cf3b43b0f67ac5c953b4c1e28f855bda
- SHA512 80eadfc86b58ed3ebaecb88df3ce9edddc4e82e7f5bec4f3f63862e42a68448a25583cf47ba7e0ab044a191efe856a746a708087c77bc54a4002e5f65e4c7727
- MD5 SHA1 SHA512
- Path /data/data/com.changedroid.picture.collage.creator/files/eula.zip
- Size 14KB
- SHA256 394bbd9ed2afbc36be5e321326e58e8df8897c336b4d73cf820bea5f05aeee65
- MD5 11c7281ee6874cb45f94f2dbc2694db6
- SHA1 23a1868c8a6e3becea17a41e21ae58d106ac6265
- SHA512 a675d1895daf55de96f614fdcfd71f6b08ad90254dd84dafa8d40d0ed93e92c1aeaeb4146b96f935188276d063f30cf4f31671c46b38a63d83a5aca88fb6023e
- SSDEEP 384:+CqQOq8Npjqrpj4fxDoUD+DDOJWD74oeP5heu/G2Csa/oD:+CVGlpaXOJWDfeP5kuQsagD
- TLSH T17662D008366EBE67EC301C381D07FFB54991F41F4C65950983DC91EAABC6A2257842D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/files/offline_startapp_eula_body.html
- Size 22KB
- SHA256 769c69a56439955dcec9378d50b30e2a4d3c27127e9f57d15b7ec7b5e5118d4e
- MD5 da8d5b926af3923f0d1f400c9521e2c4
- SHA1 7a577a74ea3f7f3769e01a4e91b5f8c54caa14cf
- SHA512 9997e16ec832b6c970ae0b16772908aacfe7326ec4cef212b044706c17b74053ee72814a1c396322873be26a693e348101948fa850e20705b60a3c4facb77109
- SSDEEP 384:SpJSAy4C/DgrhOIIpyq+eP3Zid5E/Db1sE/D9yvtMJ45bTUiA:SpPMpyqpP3ZiI1sayvh11A
- TLSH T1F5A20A25E2463949B036C4F49522AA09FF38414FC7832ACDF5AD7BEB6F725D0842B6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/files/offline_startapp_eula_footer.html
- Size 13KB
- SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
- MD5 9818dabc2eb86d5f4f071e9d67334570
- SHA1 117e7978c9293d86ea5492b90a4999cc24225dbb
- SHA512 79937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0
- SSDEEP 192:SIC1VPawVyCxZ7/YDLFn+D2yi0+DZQuDSeDOIDEFpS4V4GDjFu0QE69HqKS1cBIZ:SIiVxSAykfVBDjFaW18IZ
- TLSH T13F527564E2053856B137D1B4A726A508FF38404FC6832ACDF9ADBFE56F31594847BAE0
- MD5 SHA1 SHA512 SSDEEP TLSH