Overview
overview
10Static
static
10Business C...ro.apk
android-9-x86
6Calculator 1.apk
android-9-x86
1Calculator 1.apk
android-10-x64
1Calculator 1.apk
android-11-x64
1Calculator.apk
android-9-x86
1Calculator.apk
android-10-x64
1Calculator.apk
android-11-x64
1Chinese Nu...B).apk
android-9-x86
7Chinese Nu...B).apk
android-10-x64
7Chinese Nu...B).apk
android-11-x64
7Collage Creator.apk
android-9-x86
6Collage Creator.apk
android-10-x64
7Collage Creator.apk
android-11-x64
7Conference.apk
android-9-x86
6Conference.apk
android-10-x64
6Conference.apk
android-11-x64
6Counter-St....0.apk
android-9-x86
6Counter-St....0.apk
android-10-x64
1Counter-St....0.apk
android-11-x64
6c38c675a43...70.apk
android-9-x86
10c38c675a43...70.apk
android-10-x64
10c38c675a43...70.apk
android-11-x64
10chinese_locker.apk
android-9-x86
6chinese_locker.apk
android-10-x64
6chinese_locker.apk
android-11-x64
6com.AngryNeighbor.apk
android-9-x86
1com.AngryNeighbor.apk
android-10-x64
1com.AngryNeighbor.apk
android-11-x64
1com.crazya...er.apk
android-9-x86
7com.crazya...er.apk
android-10-x64
7com.crazya...er.apk
android-11-x64
7com.my.kfc...hk.apk
android-9-x86
5Analysis
- max time kernel
25s - max time network
46s - platform
android-10_x64 - resource
android-x64-20260306-en - resource tags
arch:x64arch:x86image:android-x64-20260306-enlocale:en-usos:android-10-x64system - submitted
21/03/2026, 16:50
Behavioral task
behavioral1
Sample
Business Calendar Pro.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral2
Sample
Calculator 1.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral3
Sample
Calculator 1.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral4
Sample
Calculator 1.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral5
Sample
Calculator.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral6
Sample
Calculator.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral7
Sample
Calculator.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral8
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral9
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x64-20260306-en
Behavioral task
behavioral10
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral11
Sample
Collage Creator.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral12
Sample
Collage Creator.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral13
Sample
Collage Creator.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral14
Sample
Conference.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral15
Sample
Conference.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral16
Sample
Conference.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral17
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral18
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral19
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral20
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral21
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral22
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral23
Sample
chinese_locker.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral24
Sample
chinese_locker.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral25
Sample
chinese_locker.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral26
Sample
com.AngryNeighbor.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral27
Sample
com.AngryNeighbor.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral28
Sample
com.AngryNeighbor.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral29
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral30
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral31
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral32
Sample
com.my.kfckfcgrrgihhk.apk
Resource
android-x86-arm-20260306-en
General
- Target Collage Creator.apk
- Size 9.4MB
- Sample260321-vcmnlsbt4r
- SHA256 27cd0366117cc9204121518a0fdb9eeaba8234cda9704bee0c310b1ae7b1bb79
- MD5 de842dd94324492ace8c2c8ebd350bc8
- SHA1 e8c4413af987ec625a8a5dde456d322d4ac106c9
- SHA512 a52965523a83f85b14d1598dc5fbd6e45e28c8f035bb82e622506754b4d61d19253d7b1ba07ecd16d077790dac6c2e22ee38216341ba05fc859949ca3cf2e014
- SSDEEP 196608:1oUx4hGg6rUgE12P2++KsTCJ54eABP6p+3CXdFvHL5BvtRDe+CmFSA5GA1WSFr:dx4hn6rUgG++K74eHp+3UrPL55DBCRA1
- TLSH T1F9A633A2C346FF21E466C5364BB6406F7A110DC05952EB66317EF4225FFFAA0C944F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.changedroid.picture.collage.creator - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.changedroid.picture.collage.creator - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.changedroid.picture.collage.creator - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.changedroid.picture.collage.creator - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.changedroid.picture.collage.creator - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.changedroid.picture.collage.creator - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.changedroid.picture.collage.creator - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.changedroid.picture.collage.creator
Processes
-
com.changedroid.picture.collage.creator1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5048
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db
- Size 20KB
- SHA256 4668e4a406f9231490040c5495a98870435ecb2bcd66ff3c27bcd9d76383f58b
- MD5 78fde39e690d38b48271748612fe6dcd
- SHA1 e64a5c1ddfe9f7e4be534181376ba7ac55ec1830
- SHA512 d1ea0035bc8442004942fa411da8355dfc24c5c12fbf0607b738585eb408e7567046eea3853385ef5f28e9e77a8b04a71cf1cfd5d2a3a75ffcf6f90844badb10
- SSDEEP 12:TLmnCKl3DWa1lE9OJdekvOf7nRmBEyPbAVOw:TLUKa1lbdCwGSE
- TLSH T1F392F1C3C7000F13E5C412F2F45443E00DB21BDF41AAD3C315510A147D475847427D88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 512B
- SHA256 721839ecf6dac4bb23b5695c90fd8d652c6fce6f326d77d80aac4fd2aeaf055e
- MD5 95407dde52998619020a50cbe85d0710
- SHA1 1fa983bd41ff379935268981ba1f75c73f753dca
- SHA512 1b7b949a7dd458f57ec31f2297aee397525c37c88ed07bfd1ae64064edb67abc2414cbc48ac9ec41e3531aef0a16a85432842a7892af506d9076642cb1857aaa
- MD5 SHA1 SHA512
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 8KB
- SHA256 44bdb3e98830465f3cfb86b934b03e312c46789a241cad247e7ed32d31f22a6e
- MD5 1b3ca379266338c15a5fd3eff5a14b06
- SHA1 4dc5a62c30809d77d2b3f6f0e890f5de802fcd1b
- SHA512 0b3b7ce070c078b34d90627bc5ecaf38ed019e7fec8635aee449d327c2b4e6745f54846d2cd9706c5439543d29ab1f1ae638dff474bf16632095c48cd0a868f0
- SSDEEP 6:7+/l9Ks4n1yEpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyt:7+trLEqLiuWdwRmBEyPbDt
- TLSH T15A0222CD63C40822C91956B790F483402E00E71ECA62CF4755A008A87C438CCA4A0E4C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 8KB
- SHA256 9ad81e27c0687cad33de1126737572332853315060a5d092cb53835e6ec4bd2d
- MD5 b7e6b7e0d35202f83080a268194a625a
- SHA1 d0fdfb55208cb69e6abcbe35ca5617ac73b75f94
- SHA512 cc26e9e8232dda8edd84985fb53cd1af68ffdd79f64a2ca6a4ba8b575551d8b4efc3d74650b04dac39764c6d300b4abcb61067d6d0981560bd66813854f789c8
- SSDEEP 6:7+/l9PPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKDs//SZ:7+tJqLJdTRmBEyPbss0
- TLSH T15202228A63401A13C4291BB790E883402ED0E715C323CB07156008983C866CCA890D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/files/INSTALLATION
- Size 36B
- SHA256 9dcc8ce158f7a66f1f8705715985971b63b2dcf2a798597712239874513465f0
- MD5 ad6f61031403e1da6b4032252dda9e01
- SHA1 9052666f7496dcb473da9b78a9078e2c608cf820
- SHA512 b8cfb13b9cc6db4948dfbcad73b52ae0624f9cbe466da63d266eba481f537ab376496b5b02a151eae928a1b72105b08f05d7c2b29731d441b6bd2b1aa5e9a695
- MD5 SHA1 SHA512
- Path /data/data/com.changedroid.picture.collage.creator/files/eula.zip
- Size 14KB
- SHA256 394bbd9ed2afbc36be5e321326e58e8df8897c336b4d73cf820bea5f05aeee65
- MD5 11c7281ee6874cb45f94f2dbc2694db6
- SHA1 23a1868c8a6e3becea17a41e21ae58d106ac6265
- SHA512 a675d1895daf55de96f614fdcfd71f6b08ad90254dd84dafa8d40d0ed93e92c1aeaeb4146b96f935188276d063f30cf4f31671c46b38a63d83a5aca88fb6023e
- SSDEEP 384:+CqQOq8Npjqrpj4fxDoUD+DDOJWD74oeP5heu/G2Csa/oD:+CVGlpaXOJWDfeP5kuQsagD
- TLSH T17662D008366EBE67EC301C381D07FFB54991F41F4C65950983DC91EAABC6A2257842D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/files/offline_startapp_eula_body.html
- Size 22KB
- SHA256 769c69a56439955dcec9378d50b30e2a4d3c27127e9f57d15b7ec7b5e5118d4e
- MD5 da8d5b926af3923f0d1f400c9521e2c4
- SHA1 7a577a74ea3f7f3769e01a4e91b5f8c54caa14cf
- SHA512 9997e16ec832b6c970ae0b16772908aacfe7326ec4cef212b044706c17b74053ee72814a1c396322873be26a693e348101948fa850e20705b60a3c4facb77109
- SSDEEP 384:SpJSAy4C/DgrhOIIpyq+eP3Zid5E/Db1sE/D9yvtMJ45bTUiA:SpPMpyqpP3ZiI1sayvh11A
- TLSH T1F5A20A25E2463949B036C4F49522AA09FF38414FC7832ACDF5AD7BEB6F725D0842B6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.changedroid.picture.collage.creator/files/offline_startapp_eula_footer.html
- Size 13KB
- SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
- MD5 9818dabc2eb86d5f4f071e9d67334570
- SHA1 117e7978c9293d86ea5492b90a4999cc24225dbb
- SHA512 79937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0
- SSDEEP 192:SIC1VPawVyCxZ7/YDLFn+D2yi0+DZQuDSeDOIDEFpS4V4GDjFu0QE69HqKS1cBIZ:SIiVxSAykfVBDjFaW18IZ
- TLSH T13F527564E2053856B137D1B4A726A508FF38404FC6832ACDF9ADBFE56F31594847BAE0
- MD5 SHA1 SHA512 SSDEEP TLSH