Analysis

  • max time kernel
    2571744s
  • max time network
    143s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:49

General

  • Target

    4f4fd56e3be0ba7395590ec026e71aab9cd27f2bf05f78d2d6f52fc12d548470.apk

  • Size

    12.5MB

  • MD5

    9f369f147d7aa9e693d142af26d4bd70

  • SHA1

    5e942d69494b6d2a2c7d2a86101170202c73fb65

  • SHA256

    4f4fd56e3be0ba7395590ec026e71aab9cd27f2bf05f78d2d6f52fc12d548470

  • SHA512

    fc7623b2ec963e82931ac8c1a18d66bf576a4a1183180b3fb5418ccb31fb53871dad51ede8b67b3a368809fd4e85993831de92c8082245ac30f1e4f4e862b817

  • SSDEEP

    393216:TvY5/ojIfNwcFLqWMc0m16ud9W/5dTKlOq:D+wxWMzJudi1Fq

Score
5/10

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity). 1 IoCs

Processes

  • android.process.acore
    1⤵
    • Changes the wallpaper (common with ransomware activity).
    PID:4475
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4513

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.gau.go.launcherex/databases/androidheart.db-journal

      Filesize

      512B

      MD5

      8063e8edf9cebc28fcd628c9c0f55d00

      SHA1

      0225d81ecca20293bea04ef4d9d6be00b9b9fd77

      SHA256

      b6344909cfe07d6dc00325484d34a1ce8ccec6a7703a933a4bf9d6b82b3f6e71

      SHA512

      b690b35a475ddfcb5eb467c87e99bd98ba3d2da5d5e69d54a29e83f6bfe8c09b656f60a26f8755a53694550484ad3d1fb50798760a413d917f50c77e9e8fae2c

    • /data/data/com.gau.go.launcherex/databases/androidheart.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.gau.go.launcherex/databases/androidheart.db-wal

      Filesize

      16KB

      MD5

      6004f17957532b6bbc119786605e48c6

      SHA1

      94e7399d04b462cf8a0a653ac6cd00b3a8750778

      SHA256

      6c8f63c08199463cc059f6f4cc7928239a62d7dbff817545ad8b34e7856d2c6c

      SHA512

      a5f9bee85018a13a5800edb14b1e09b5b85fec3ba495d89e0f4ab705160d2e2bf87b4c18d741f3011799516f5f4ab1dafee8cfd055bf88f4fd9237ffaf198012

    • /data/data/com.gau.go.launcherex/databases/appgamecenter.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.gau.go.launcherex/databases/appgamecenter.db-journal

      Filesize

      512B

      MD5

      a6fa901c644d7d461575277f18b80081

      SHA1

      a2efb46b3d5e31e896d1e70079eb66501fa3ef5e

      SHA256

      eba60c81baa258a5a8deb1d6f9ddb720fad7cd7ad82bc0c63f531d05a842f743

      SHA512

      829f160a4e42119249c7f86ae4de72d28115cd6984f6d62fd34d124ab4d74c89cef7ef2fa2f7c8c173ffec42530329a4bc3160f44a71fecb231197b8888a339d

    • /data/data/com.gau.go.launcherex/databases/appgamecenter.db-wal

      Filesize

      28KB

      MD5

      c03364139b6ee4b1657f230466c2c9da

      SHA1

      bf1427c57732f18c58972b91111aad2383fd2312

      SHA256

      eca23b1e5b48727c8de04c76508c1f37ca4970ba9d9d6db7df34b7c8f4d9cef6

      SHA512

      1c60a381d9b0c833cc73f10545fb8bf6c759ad28083c668fe047950ea6bac13dc3e8effc9d1ee281b438eaa24f1ab0394d4bfedee2cd0fa975ee0e85823a11f3

    • /data/system/users/0/wallpaper_orig

      Filesize

      178KB

      MD5

      02e6734e3ddf7bb845fc5e74fc9790ec

      SHA1

      eb91ca03bf2cca6eecf8de57e9beb369c703248f

      SHA256

      56e26b97cc4a2701ceccde1a7b75b0ec34d489a6e2b32d041c72874fdbbd8913

      SHA512

      cabc260796157892f12ba799edc4281f40c339c7e88feb0b00f92a0d3ddb9392764fec354ea965d8348e8eb65a4ecb14e0adc1986aea7fc3857e87c6706c1a4c

    • /storage/emulated/0/GOLauncherEX/log/stack-1703378793948_stk.txt

      Filesize

      6KB

      MD5

      89321d2ff3a685eb23d6ffd24f01aa51

      SHA1

      cce1841cbcfe96e736e2298de62cebf7e5a70856

      SHA256

      0861254d91cb47233d7b04bb07f677ecb231e2ef85c5dbf414d86093f8f77ba0

      SHA512

      877f64f5fbcab5cc82fb0079ce1ecf2cd5d63a4e1658200ac1d6b33360635336a9cc0516b01f574fe23ab527d8b7ece1ee96cf577956d51553ac0110924023fa