Overview

overview

10

Static

static

7

com.autopr...om.zip

android-9-x86

com.autopr...om.zip

android-10-x64

com.autopr...om.zip

android-11-x64

com.autopr...er.apk

android-9-x86

10

com.autopr...er.apk

android-10-x64

5

com.autopr...er.apk

android-11-x64

5

config.ar.apk

android-9-x86

config.ar.apk

android-10-x64

config.ar.apk

android-11-x64

config.de.apk

android-9-x86

config.de.apk

android-10-x64

config.de.apk

android-11-x64

config.en.apk

android-9-x86

config.en.apk

android-10-x64

config.en.apk

android-11-x64

config.es.apk

android-9-x86

config.es.apk

android-10-x64

config.es.apk

android-11-x64

config.fr.apk

android-9-x86

config.fr.apk

android-10-x64

config.fr.apk

android-11-x64

config.hi.apk

android-9-x86

config.hi.apk

android-10-x64

config.hi.apk

android-11-x64

config.in.apk

android-9-x86

config.in.apk

android-10-x64

config.in.apk

android-11-x64

config.it.apk

android-9-x86

config.it.apk

android-10-x64

config.it.apk

android-11-x64

config.ja.apk

android-9-x86

config.ja.apk

android-10-x64

Analysis

  • max time kernel
    1985137s
  • max time network
    58s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    14-11-2022 13:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    com.autoprivate.gallylocker.apk

  • Size

    2.0MB

  • MD5

    d2af80a36bdbb5fb11adaf030ada0f36

  • SHA1

    58bf8a0d23fe7c6f184ce7f88ad09f0d169e501f

  • SHA256

    25922e86d546a5027c19d0e06bf6203cdf9f1f10d69a944f4225cbfe9f258627

  • SHA512

    c1864d11709750896de80098ba368644585922c90547733038168440538377d71d54b18a2921cb36e11ffb0feb137016abd21cd9e0e84d466505942a69ba3895

  • SSDEEP

    49152:XuKcHIIdnVifRWaxFIb9gU0KxiXoS2CPwb2mr547A:enIEnViLxa9x0vXgC4b2mr547A

Score
5/10
ransomware

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.autoprivate.gallylocker
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5055

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.autoprivate.gallylocker/shared_prefs/com.autoprivate.gallylocker_preferences.xml
    Filesize

    110B

    MD5

    25c15f9de625c28e23487a01399abb5d

    SHA1

    77dc15a5aaf6c7aa772aa1f99008c159bddde244

    SHA256

    c09e43856d9c47b2ba76794f0aa55496a93caa019807ca60a53d7845d3b8ac9a

    SHA512

    2425a6408ec54c1c045cc99be5937f09cbf43a623e44e3cdfe74b86f9125e1fb4e0f8a4dda4d1acdf974589025e6072ae73b76e9adc69d72f43bb2da94d40798

    Download Submit