Analysis

  • max time kernel
    22s
  • max time network
    18s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    23/05/2026, 16:56

General

  • Target
    TuQK_chicken.gun.gdi.tuqk.apk
  • Size 3.5MB
  • Sample260523-vf5ctset8r
  • SHA256 b35f5c9d698f8ab321745d4087ab6e9157bc2d9a109ccbee83f1707aeca82e34
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • chicken.gun.gdi.tuqk
    1⤵
    • Queries the mobile country code (MCC)
    • Changes the wallpaper (common with ransomware activity)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4265

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 86KB
        • SHA256 38c9e012066917ceeb425082fc2ede210c343aa07caa6a975a2a98b88d66a8e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 86KB
        • SHA256 188620d7d84b2f86c942b2f2374755447d2c511b1e41f05a94f0208a580d34da
        • MD5 SHA1 SHA512 SSDEEP TLSH