Overview
overview
10Static
static
10Business C...ro.apk
android-9-x86
6Calculator 1.apk
android-9-x86
1Calculator 1.apk
android-10-x64
1Calculator 1.apk
android-11-x64
1Calculator.apk
android-9-x86
1Calculator.apk
android-10-x64
1Calculator.apk
android-11-x64
1Chinese Nu...B).apk
android-9-x86
7Chinese Nu...B).apk
android-10-x64
7Chinese Nu...B).apk
android-11-x64
7Collage Creator.apk
android-9-x86
6Collage Creator.apk
android-10-x64
7Collage Creator.apk
android-11-x64
7Conference.apk
android-9-x86
6Conference.apk
android-10-x64
6Conference.apk
android-11-x64
6Counter-St....0.apk
android-9-x86
6Counter-St....0.apk
android-10-x64
1Counter-St....0.apk
android-11-x64
6c38c675a43...70.apk
android-9-x86
10c38c675a43...70.apk
android-10-x64
10c38c675a43...70.apk
android-11-x64
10chinese_locker.apk
android-9-x86
6chinese_locker.apk
android-10-x64
6chinese_locker.apk
android-11-x64
6com.AngryNeighbor.apk
android-9-x86
1com.AngryNeighbor.apk
android-10-x64
1com.AngryNeighbor.apk
android-11-x64
1com.crazya...er.apk
android-9-x86
7com.crazya...er.apk
android-10-x64
7com.crazya...er.apk
android-11-x64
7com.my.kfc...hk.apk
android-9-x86
5Analysis
- max time kernel
24s - max time network
45s - platform
android-11_x64 - resource
android-x64-arm64-20260306-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260306-enlocale:en-usos:android-11-x64system - submitted
21/03/2026, 16:50
Behavioral task
behavioral1
Sample
Business Calendar Pro.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral2
Sample
Calculator 1.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral3
Sample
Calculator 1.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral4
Sample
Calculator 1.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral5
Sample
Calculator.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral6
Sample
Calculator.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral7
Sample
Calculator.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral8
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral9
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x64-20260306-en
Behavioral task
behavioral10
Sample
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral11
Sample
Collage Creator.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral12
Sample
Collage Creator.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral13
Sample
Collage Creator.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral14
Sample
Conference.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral15
Sample
Conference.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral16
Sample
Conference.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral17
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral18
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral19
Sample
Counter-Strike_1.6_1.0.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral20
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral21
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral22
Sample
c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral23
Sample
chinese_locker.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral24
Sample
chinese_locker.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral25
Sample
chinese_locker.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral26
Sample
com.AngryNeighbor.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral27
Sample
com.AngryNeighbor.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral28
Sample
com.AngryNeighbor.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral29
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x86-arm-20260306-en
Behavioral task
behavioral30
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x64-20260306-en
Behavioral task
behavioral31
Sample
com.crazyapps.angry.birds.multi.user.apk
Resource
android-x64-arm64-20260306-en
Behavioral task
behavioral32
Sample
com.my.kfckfcgrrgihhk.apk
Resource
android-x86-arm-20260306-en
General
- Target Collage Creator.apk
- Size 9.4MB
- Sample260321-vcmnlsbt4r
- SHA256 27cd0366117cc9204121518a0fdb9eeaba8234cda9704bee0c310b1ae7b1bb79
- MD5 de842dd94324492ace8c2c8ebd350bc8
- SHA1 e8c4413af987ec625a8a5dde456d322d4ac106c9
- SHA512 a52965523a83f85b14d1598dc5fbd6e45e28c8f035bb82e622506754b4d61d19253d7b1ba07ecd16d077790dac6c2e22ee38216341ba05fc859949ca3cf2e014
- SSDEEP 196608:1oUx4hGg6rUgE12P2++KsTCJ54eABP6p+3CXdFvHL5BvtRDe+CmFSA5GA1WSFr:dx4hn6rUgG++K74eHp+3UrPL55DBCRA1
- TLSH T1F9A633A2C346FF21E466C5364BB6406F7A110DC05952EB66317EF4225FFFAA0C944F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.changedroid.picture.collage.creator - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.changedroid.picture.collage.creator - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.changedroid.picture.collage.creator - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.changedroid.picture.collage.creator - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.changedroid.picture.collage.creator - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.changedroid.picture.collage.creator - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.changedroid.picture.collage.creator
Processes
-
com.changedroid.picture.collage.creator1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4741
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.changedroid.picture.collage.creator/databases/billing.db
- Size 20KB
- SHA256 88402033b64bd4df6f0088dd501ef2e89f1d84d93e677da28d6a5e793a7e32db
- MD5 5372fa833a9f005efa0d362d4715dcad
- SHA1 ebf734ec8a6df9fa3001766e2ae43bd0429fb08b
- SHA512 d97a0f24e78a48e2719c7d0e3407d58f7fc96d849134b825f69c5738b9cc0fa983ce988bdb6eb1070b61ea267057c42d8792c69f74151f7351121e0f0d1f5629
- SSDEEP 12:TLmfCKl3DWa1lE9OJdekvOf7nRmBEyPbAVOw:TL8Ka1lbdCwGSE
- TLSH T1DF92ABC3C7000E13E59402F2E45443E01DB21ADF41AAD3C319510A107D475847467D88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 512B
- SHA256 0a52586572a5ee9a87c081fca4417f8f4794e0487200c21bb6d27bd8dfaf0391
- MD5 2a278da14b0c87e0beab311f50cda1b6
- SHA1 c3df0bf2b0476c143aae8243e349af668780d3cb
- SHA512 bfb6957eb4e3d89385927e98a59b7482efc3f73f1c5ab32e0e2be8997c816e706945e4aec2f94a20af26117f2352012f1600956596ebc67ab2663cf7f5be5dbf
- MD5 SHA1 SHA512
- Path /data/user/0/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 8KB
- SHA256 321c05c8fa42972644b5aaf2c7d1a7d044c42cf35d9195ab3ccd87efa99074ed
- MD5 91d605bec598728b3cd182354966bd77
- SHA1 1ef908cb574a2f2961c29d03665810cfda80c2be
- SHA512 cf85e55ac135138e22dc9f0e1c75d59ecb2dab66eec69120453fae27adf5dc4c3794b6d257692a8b6829c5d52171eab8a44468466c60b1d25277803aef23375d
- SSDEEP 6:7+/l9rIk4n1Pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwx:7+tJWqLiuWdYRmBEyPbT
- TLSH T1B602C09CF3810813C82DAA7794DCC3400D04E7288A73CB175E9018943E074CCF4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.changedroid.picture.collage.creator/databases/billing.db-journal
- Size 8KB
- SHA256 bdd0b52747296ce03c6c8a7aec1549b02168c5820a551a6dfcdcca43dad510b6
- MD5 6d2f706064bc84c058d62f55f000f1e4
- SHA1 fef0dedb2f1b97d363bd58aa2f50743f34672b03
- SHA512 f3f3b98dd6669dc84d60961e6bff03c608c21f179b62fa6470a0968d1f567974757e244d7930c8cc2ef5e0afa9bf709756cb22214f9f3b35eedbe25ca6320d40
- SSDEEP 6:7+/l9K+Wl4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK5VM/NWn:7+tM+WiqLJdeWRmBEyPb2VsEn
- TLSH T1F402228863410803C22D1B7BA0C883801F18A72892A3CB4716A109542C076CCE8B0D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.changedroid.picture.collage.creator/files/INSTALLATION
- Size 36B
- SHA256 9354758b5b6c07642c39383d1187ad54b894aa09431a898ff50b0045dca196ee
- MD5 3cf3eb0831ed35112e5d37a22f10fe0d
- SHA1 be7a903ed7a1eb02a7221cd36632811fd73a2411
- SHA512 63709a0e40e0a05ddba4fcdc50b8bc87df3568103a8ff5e4d135d07ed83899f5b5bbe52cc8ee7cd4dfe59698ee4b62415f073a32243331f5183d56d46a32cace
- MD5 SHA1 SHA512
- Path /data/user/0/com.changedroid.picture.collage.creator/files/eula.zip
- Size 14KB
- SHA256 394bbd9ed2afbc36be5e321326e58e8df8897c336b4d73cf820bea5f05aeee65
- MD5 11c7281ee6874cb45f94f2dbc2694db6
- SHA1 23a1868c8a6e3becea17a41e21ae58d106ac6265
- SHA512 a675d1895daf55de96f614fdcfd71f6b08ad90254dd84dafa8d40d0ed93e92c1aeaeb4146b96f935188276d063f30cf4f31671c46b38a63d83a5aca88fb6023e
- SSDEEP 384:+CqQOq8Npjqrpj4fxDoUD+DDOJWD74oeP5heu/G2Csa/oD:+CVGlpaXOJWDfeP5kuQsagD
- TLSH T17662D008366EBE67EC301C381D07FFB54991F41F4C65950983DC91EAABC6A2257842D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.changedroid.picture.collage.creator/files/offline_startapp_eula_body.html
- Size 22KB
- SHA256 769c69a56439955dcec9378d50b30e2a4d3c27127e9f57d15b7ec7b5e5118d4e
- MD5 da8d5b926af3923f0d1f400c9521e2c4
- SHA1 7a577a74ea3f7f3769e01a4e91b5f8c54caa14cf
- SHA512 9997e16ec832b6c970ae0b16772908aacfe7326ec4cef212b044706c17b74053ee72814a1c396322873be26a693e348101948fa850e20705b60a3c4facb77109
- SSDEEP 384:SpJSAy4C/DgrhOIIpyq+eP3Zid5E/Db1sE/D9yvtMJ45bTUiA:SpPMpyqpP3ZiI1sayvh11A
- TLSH T1F5A20A25E2463949B036C4F49522AA09FF38414FC7832ACDF5AD7BEB6F725D0842B6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.changedroid.picture.collage.creator/files/offline_startapp_eula_footer.html
- Size 13KB
- SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
- MD5 9818dabc2eb86d5f4f071e9d67334570
- SHA1 117e7978c9293d86ea5492b90a4999cc24225dbb
- SHA512 79937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0
- SSDEEP 192:SIC1VPawVyCxZ7/YDLFn+D2yi0+DZQuDSeDOIDEFpS4V4GDjFu0QE69HqKS1cBIZ:SIiVxSAykfVBDjFaW18IZ
- TLSH T13F527564E2053856B137D1B4A726A508FF38404FC6832ACDF9ADBFE56F31594847BAE0
- MD5 SHA1 SHA512 SSDEEP TLSH