490f00aa6fd7dead3c95fc9d7ff2ef995bdca0a0fe1bdd341f7c5fc1ba71f875

Resubmissions

21/03/2026, 17:22

260321-vxselaht8v10

21/03/2026, 16:50

260321-vcmnlsbt4r10

Analysis

max time kernel
17s
max time network
16s
platform
android-9_x86
resource
android-x86-arm-20260306-en
resource tags

arch:armarch:x86image:android-x86-arm-20260306-enlocale:en-usos:android-9-x86system
submitted
21/03/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.my.kfckfcgrrgihhk.apk
Size 449KB
Sample260321-vcmnlsbt4r
SHA256 490f00aa6fd7dead3c95fc9d7ff2ef995bdca0a0fe1bdd341f7c5fc1ba71f875
MD5 dd6d76c2fd1177464192372692d7122a
SHA1 746cb38a725ab07f9d1c16c38add6624e24bd687
SHA512 f5011b14979eaf77cc9693c092d3564e9b30fdb0a9187e68a4c1ba4946e292094836cf28e4f028b62279de7cc3e620434d5206d6ff3dc452618ee003ecfea389
SSDEEP 12288:0TjqNlv7CMNpB5ImqAaHAa8AaxAayAa3hN4apqye:0shNTOv9O7gb0Z
TLSH
T10BA42385BE9C4C3EE5BEA9BA46AC448DDFD1D3C32D4986C249285AD51EC41DB4FF030A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

ransomware

Malware Config

Signatures

Changes the wallpaper (common with ransomware activity) 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	com.my.kfckfcgrrgihhk

com.my.kfckfcgrrgihhk
1⤵
- Changes the wallpaper (common with ransomware activity)
PID:4320
- logcat
  2⤵
  PID:4372
- /system/bin/sh /system/bin/pm list packages
  2⤵
  PID:4453
- - cmd package list packages
    3⤵
    PID:4471
- /system/bin/sh /system/bin/pm uninstall com.android.cts.priv.ctsshim
  2⤵
  PID:4492
- - cmd package uninstall com.android.cts.priv.ctsshim
    3⤵
    PID:4560
- /system/bin/sh /system/bin/pm uninstall com.google.android.youtube
  2⤵
  PID:4505
- - cmd package uninstall com.google.android.youtube
    3⤵
    PID:4601
- /system/bin/sh /system/bin/pm uninstall com.android.internal.display.cutout.emulation.corner
  2⤵
  PID:4524
- - cmd package uninstall com.android.internal.display.cutout.emulation.corner
    3⤵
    PID:4635
- /system/bin/sh /system/bin/pm uninstall com.google.android.ext.services
  2⤵
  PID:4544
- - cmd package uninstall com.google.android.ext.services
    3⤵
    PID:4681
- /system/bin/sh /system/bin/pm uninstall com.android.internal.display.cutout.emulation.double
  2⤵
  PID:4569
- - cmd package uninstall com.android.internal.display.cutout.emulation.double
    3⤵
    PID:4710
- /system/bin/sh /system/bin/pm uninstall com.android.providers.telephony
  2⤵
  PID:4593
- - cmd package uninstall com.android.providers.telephony
    3⤵
    PID:4700
- /system/bin/sh /system/bin/pm uninstall com.google.android.googlequicksearchbox
  2⤵
  PID:4618
- - cmd package uninstall com.google.android.googlequicksearchbox
    3⤵
    PID:4744
- /system/bin/sh /system/bin/pm uninstall com.android.providers.calendar
  2⤵
  PID:4661
- - cmd package uninstall com.android.providers.calendar
    3⤵
    PID:4798
- /system/bin/sh /system/bin/pm uninstall com.android.providers.media
  2⤵
  PID:4733
- - cmd package uninstall com.android.providers.media
    3⤵
    PID:4836
- /system/bin/sh /system/bin/pm uninstall com.google.android.onetimeinitializer
  2⤵
  PID:4768
- - cmd package uninstall com.google.android.onetimeinitializer
    3⤵
    PID:4882
- /system/bin/sh /system/bin/pm uninstall com.google.android.ext.shared
  2⤵
  PID:4811
- - cmd package uninstall com.google.android.ext.shared
    3⤵
    PID:4937
- /system/bin/sh /system/bin/pm uninstall com.android.documentsui
  2⤵
  PID:4853
- - cmd package uninstall com.android.documentsui
    3⤵
    PID:4956
- /system/bin/sh /system/bin/pm uninstall com.android.externalstorage
  2⤵
  PID:4892
- - cmd package uninstall com.android.externalstorage
    3⤵
    PID:4984
- /system/bin/sh /system/bin/pm uninstall com.android.htmlviewer
  2⤵
  PID:4916
- - cmd package uninstall com.android.htmlviewer
    3⤵
    PID:5050
- /system/bin/sh /system/bin/pm uninstall com.android.companiondevicemanager
  2⤵
  PID:4945
- - cmd package uninstall com.android.companiondevicemanager
    3⤵
    PID:5064
- /system/bin/sh /system/bin/pm uninstall com.android.mms.service
  2⤵
  PID:4992
- - cmd package uninstall com.android.mms.service
    3⤵
    PID:5132
- /system/bin/sh /system/bin/pm uninstall com.android.providers.downloads
  2⤵
  PID:5022
- - cmd package uninstall com.android.providers.downloads
    3⤵
    PID:5140
- /system/bin/sh /system/bin/pm uninstall com.google.android.apps.messaging
  2⤵
  PID:5042
- - cmd package uninstall com.google.android.apps.messaging
    3⤵
    PID:5162
- /system/bin/sh /system/bin/pm uninstall com.google.android.configupdater
  2⤵
  PID:5092
- - cmd package uninstall com.google.android.configupdater
    3⤵
    PID:5205
- /system/bin/sh /system/bin/pm uninstall com.android.defcontainer
  2⤵
  PID:5125
- - cmd package uninstall com.android.defcontainer
    3⤵
    PID:5278
- /system/bin/sh /system/bin/pm uninstall com.my.kfckfcgrrgihhk
  2⤵
  PID:5194
- - cmd package uninstall com.my.kfckfcgrrgihhk
    3⤵
    PID:5296
- /system/bin/sh /system/bin/pm uninstall com.android.providers.downloads.ui
  2⤵
  PID:5235
- - cmd package uninstall com.android.providers.downloads.ui
    3⤵
    PID:5339
- /system/bin/sh /system/bin/pm uninstall com.android.vending
  2⤵
  PID:5258
- - cmd package uninstall com.android.vending
    3⤵
    PID:5373
- /system/bin/sh /system/bin/pm uninstall com.android.pacprocessor
  2⤵
  PID:5289
- - cmd package uninstall com.android.pacprocessor
    3⤵
    PID:5389
- /system/bin/sh /system/bin/pm uninstall com.android.simappdialog
  2⤵
  PID:5328
- - cmd package uninstall com.android.simappdialog
    3⤵
    PID:5450
- /system/bin/sh /system/bin/pm uninstall com.android.internal.display.cutout.emulation.tall
  2⤵
  PID:5357
- - cmd package uninstall com.android.internal.display.cutout.emulation.tall
    3⤵
    PID:5510
- /system/bin/sh /system/bin/pm uninstall com.android.certinstaller
  2⤵
  PID:5407
- - cmd package uninstall com.android.certinstaller
    3⤵
    PID:5520
- /system/bin/sh /system/bin/pm uninstall com.android.carrierconfig
  2⤵
  PID:5435
- - cmd package uninstall com.android.carrierconfig
    3⤵
    PID:5564
- /system/bin/sh /system/bin/pm uninstall android
  2⤵
  PID:5468
- - cmd package uninstall android
    3⤵
    PID:5577
- /system/bin/sh /system/bin/pm uninstall com.android.contacts
  2⤵
  PID:5490
- - cmd package uninstall com.android.contacts
    3⤵
    PID:5606
- /system/bin/sh /system/bin/pm uninstall com.android.camera2
  2⤵
  PID:5539
- - cmd package uninstall com.android.camera2
    3⤵
    PID:5678
- /system/bin/sh /system/bin/pm uninstall com.google.android.apps.inputmethod.hindi
  2⤵
  PID:5590
- - cmd package uninstall com.google.android.apps.inputmethod.hindi
    3⤵
    PID:5723
- /system/bin/sh /system/bin/pm uninstall com.android.egg
  2⤵
  PID:5625
- - cmd package uninstall com.android.egg
    3⤵
    PID:5772
- /system/bin/sh /system/bin/pm uninstall com.android.mtp
  2⤵
  PID:5657
- - cmd package uninstall com.android.mtp
    3⤵
    PID:5767
- /system/bin/sh /system/bin/pm uninstall com.android.nfc
  2⤵
  PID:5693
- - cmd package uninstall com.android.nfc
    3⤵
    PID:5838
- /system/bin/sh /system/bin/pm uninstall com.android.backupconfirm
  2⤵
  PID:5714
- - cmd package uninstall com.android.backupconfirm
    3⤵
    PID:5860
- /system/bin/sh /system/bin/pm uninstall com.google.android.deskclock
  2⤵
  PID:5745
- - cmd package uninstall com.google.android.deskclock
    3⤵
    PID:5887
- /system/bin/sh /system/bin/pm uninstall com.android.statementservice
  2⤵
  PID:5794
- - cmd package uninstall com.android.statementservice
    3⤵
    PID:5903
- /system/bin/sh /system/bin/pm uninstall com.google.android.gm
  2⤵
  PID:5818
- - cmd package uninstall com.google.android.gm
    3⤵
    PID:5954
- /system/bin/sh /system/bin/pm uninstall com.android.settings.intelligence
  2⤵
  PID:5873
- - cmd package uninstall com.android.settings.intelligence
    3⤵
    PID:6030
- /system/bin/sh /system/bin/pm uninstall com.android.systemui.theme.dark
  2⤵
  PID:5936
- - cmd package uninstall com.android.systemui.theme.dark
    3⤵
    PID:6049
- /system/bin/sh /system/bin/pm uninstall com.google.android.setupwizard
  2⤵
  PID:5972
- - cmd package uninstall com.google.android.setupwizard
    3⤵
    PID:6079
- /system/bin/sh /system/bin/pm uninstall com.android.providers.settings
  2⤵
  PID:6002
- - cmd package uninstall com.android.providers.settings
    3⤵
    PID:6124
- /system/bin/sh /system/bin/pm uninstall com.android.sharedstoragebackup
  2⤵
  PID:6019
- - cmd package uninstall com.android.sharedstoragebackup
    3⤵
    PID:6138
- /system/bin/sh /system/bin/pm uninstall com.google.android.music
  2⤵
  PID:6064
- - cmd package uninstall com.google.android.music
    3⤵
    PID:6192
- /system/bin/sh /system/bin/pm uninstall com.android.printspooler
  2⤵
  PID:6103
- - cmd package uninstall com.android.printspooler
    3⤵
    PID:6230
- /system/bin/sh /system/bin/pm uninstall com.android.dreams.basic
  2⤵
  PID:6152
- - cmd package uninstall com.android.dreams.basic
    3⤵
    PID:6258
- /system/bin/sh /system/bin/pm uninstall com.android.se
  2⤵
  PID:6176
- - cmd package uninstall com.android.se
    3⤵
    PID:6307
- /system/bin/sh /system/bin/pm uninstall com.google.android.dialer
  2⤵
  PID:6248
- - cmd package uninstall com.google.android.dialer
    3⤵
    PID:6346
- /system/bin/sh /system/bin/pm uninstall com.android.inputdevices
  2⤵
  PID:6217
- - cmd package uninstall com.android.inputdevices
    3⤵
    PID:6342
- /system/bin/sh /system/bin/pm uninstall com.android.bips
  2⤵
  PID:6280
- - cmd package uninstall com.android.bips
    3⤵
    PID:6395
- /system/bin/sh /system/bin/pm uninstall com.android.musicfx
  2⤵
  PID:6322
- - cmd package uninstall com.android.musicfx
    3⤵
    PID:6432
- /system/bin/sh /system/bin/pm uninstall com.google.android.apps.docs
  2⤵
  PID:6363
- - cmd package uninstall com.google.android.apps.docs
    3⤵
    PID:6490
- /system/bin/sh /system/bin/pm uninstall com.google.android.apps.maps
  2⤵
  PID:6413
- - cmd package uninstall com.google.android.apps.maps
    3⤵
    PID:6550
- /system/bin/sh /system/bin/pm uninstall com.android.internal.display.cutout.emulation.emu01
  2⤵
  PID:6449
- - cmd package uninstall com.android.internal.display.cutout.emulation.emu01
    3⤵
    PID:6584
- /system/bin/sh /system/bin/pm uninstall com.android.cellbroadcastreceiver
  2⤵
  PID:6480
- - cmd package uninstall com.android.cellbroadcastreceiver
    3⤵
    PID:6608
- /system/bin/sh /system/bin/pm uninstall com.google.android.webview
  2⤵
  PID:6513
- - cmd package uninstall com.google.android.webview
    3⤵
    PID:6631
- /system/bin/sh /system/bin/pm uninstall com.android.server.telecom
  2⤵
  PID:6534
- - cmd package uninstall com.android.server.telecom
    3⤵
    PID:6649
- /system/bin/sh /system/bin/pm uninstall com.google.android.syncadapters.contacts
  2⤵
  PID:6566
- - cmd package uninstall com.google.android.syncadapters.contacts
    3⤵
    PID:6699
- /system/bin/sh /system/bin/pm uninstall com.android.keychain
  2⤵
  PID:6599
- - cmd package uninstall com.android.keychain
    3⤵
    PID:6746
- /system/bin/sh /system/bin/pm uninstall com.android.chrome
  2⤵
  PID:6643
- - cmd package uninstall com.android.chrome
    3⤵
    PID:6757
- /system/bin/sh /system/bin/pm uninstall com.google.android.packageinstaller
  2⤵
  PID:6690
- - cmd package uninstall com.google.android.packageinstaller
    3⤵
    PID:6816
- /system/bin/sh /system/bin/pm uninstall com.google.android.gms
  2⤵
  PID:6725
- - cmd package uninstall com.google.android.gms
    3⤵
    PID:6838
- /system/bin/sh /system/bin/pm uninstall com.google.android.gsf
  2⤵
  PID:6777
- - cmd package uninstall com.google.android.gsf
    3⤵
    PID:6902
- /system/bin/sh /system/bin/pm uninstall com.google.android.ims
  2⤵
  PID:6809
- - cmd package uninstall com.google.android.ims
    3⤵
    PID:6929
- /system/bin/sh /system/bin/pm uninstall com.google.android.tts
  2⤵
  PID:6854
- /system/bin/sh /system/bin/pm uninstall com.ustwo.lwp
  2⤵
  PID:6881
- - cmd package uninstall com.ustwo.lwp
    3⤵
    PID:7007
- /system/bin/sh /system/bin/pm uninstall com.android.calllogbackup
  2⤵
  PID:6914
- - cmd package uninstall com.android.calllogbackup
    3⤵
    PID:7043
- /system/bin/sh /system/bin/pm uninstall com.google.android.partnersetup
  2⤵
  PID:6951
- - cmd package uninstall com.google.android.partnersetup
    3⤵
    PID:7063
- /system/bin/sh /system/bin/pm uninstall com.google.android.apps.wallpaper.nexus
  2⤵
  PID:6980
- - cmd package uninstall com.google.android.apps.wallpaper.nexus
    3⤵
    PID:7095

cmd package uninstall com.google.android.tts
1⤵
PID:6963

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 44KB
SHA256 8ce0a908cad603c0ec9bbad69c28aa6f4d4d93c8b9d5b39b06cbeb26590e7fe0
MD5 d5f3a55c100852363bd1a3bb72d778b4
SHA1 0b93bb35cb7de13e83e3ecfb8746a436fe280b34
SHA512 1abd1882d665e923ab719dca27541bfda0650daa8085b6173df08991b31719827ead572e3208a5ba6ced9bd530115922251358a9a1fea346f561b50578db3b7c
SSDEEP 768:pJYayHeqnz2HQkqTSBhrCUMpa1BcLP/1qZsKkxGPM4CUURswpyOYa539:p7geqz2wkjBQsBcLY+W3flEy1a5N
TLSH
T19513F147D5385D67128B05103D056C2B0C788E60BA759E84D3DB28FA8FE76AF3C15AA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 608B
SHA256 e48d390b4a2a423ef641f779295db615b93281b1115fd7ae573de26645dce60d
MD5 986a0dfa86b3990024450713868d2b42
SHA1 b67aae2df72f953e9d57c3ec9e2abb6c594ea8cf
SHA512 c0f7383798d10f76e161734b994b1ab18a11e8564eb9de0f2a58c6c4952ceaa4fa907ac553cc51c031dc98b7f3858168f86d3ba99d5e096ee8ddf26c0ac23891
TLSH
T1C8F0B7DF6343B833CDF8209990263A67441CF2556217DB1DC3225F6C858F0027D151F1
MD5 SHA1 SHA512 TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 48KB
SHA256 ec9d502772c4d3325b955f5dab348b69bb3ee2e7d71bb668a8bae843aafe79e6
MD5 c8f1d3887c49588a21861678ede89b9b
SHA1 541ce80e7d66a903f44104b6f69be34add85ad7d
SHA512 e2a296673e94e33fbacd53fd2399977f07f5ccdeaf97f74a175b91dec09248ab9a316045e88f113fa070e40d9caa39b80920fadb256ef31a89ba54b666db754f
SSDEEP 1536:5NXUCNlqqdKAiOMquo5s8lzpZD+6RseGR9Y:5VNsKKAhduo5XZp1+62ex
TLSH
T15C2302FABC3EE39A9B7EF5C22D4D363809838BC18DED1A540C1F94896C467B5812D1E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads