e841c477978aa2ae64ec0b9d212b1b416cb1ba1d056f80465909e4da41e86512

Resubmissions

08/07/2026, 16:09

260708-tl4stacs3q

08/07/2026, 16:01

260708-tgeywsb19l6

Analysis

user interaction
yes
max time kernel
243s
max time network
280s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
08/07/2026, 16:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AzraielWallpaperNew.apk
Size 84.7MB
Sample260708-tgeywsb19l
SHA256 e841c477978aa2ae64ec0b9d212b1b416cb1ba1d056f80465909e4da41e86512
MD5 0caa9ddf60932b0e3642870070733278
SHA1 c5ba7c1972e56d3fd71cf854343740214673c512
SHA512 e75c5a271f95704a6e1564b8300d6b603d8f122975303107536033587a3c1edba8e74547f0de39f06c6c20df4fce6df15d9ac8afab1db5ba3f392bc2db19c148
SSDEEP 1572864:x9EITt2MkBEjYjmE8/LtcmtkQHgB3WFhG02/QV66YEjdYYoGWRMOVrkgfgsI:x9Jx2HB4YmFDtcmtu3W/GZ/E66YEJYB6
TLSH
T1A5183386E78DD83BC47360364D6A566092C66C638BA78B53750DFAC82B7F5C40E49FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion execution persistence ransomware

Malware Config

Signatures

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.example.azraielwallpaper

Changes the wallpaper (common with ransomware activity) 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	com.example.azraielwallpaper

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.azraielwallpaper

com.example.azraielwallpaper
1⤵
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Changes the wallpaper (common with ransomware activity)
- Schedules tasks to execute at a specified time
PID:4329

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.example.azraielwallpaper/files/profileInstalled
Size 24B
SHA256 5426d6323aa2fc04f62d46e512e23eb6f285c14eec3cb85c2dd964db595d5763
MD5 b77d70abd0b94c6c0942b9af97b1dac7
SHA1 292900d98c7a97d540b1871572d139660f22bee4
SHA512 1b095e98a077b01e2edade5f401704cc0a40bccb036a2069604e22ab7525c8ff393e02a64fc377e1bc5137c979075b2845739bb9256e28d820e0dddf80ca35c7
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb
Size 104KB
SHA256 2f5f83eeb2c62c4f5fd0077f40ba7adcf08220627898e8e24dfe28a29540de34
MD5 b4705c3796d76f59132ed631a78b001e
SHA1 28c8d16763bea4cbc8dad0d407ecec4a3339a15a
SHA512 73a68fc2b3b4069a6751015f9f0164a0f99e0053077d43a9716e996fb85f276b5696d9554aba9bf7d0c70ed7d68bfe61c4c1a92d3c1952ce91559f54c8eebcc9
SSDEEP 192:Ow1V1qczDtidjnfWzzb83zSx+XD86u0ED:Ow1V1qc/tidjnfWzzb83zSoXD86u0ED
TLSH
T1BFA396CE0F693600D8A534F0E9A00BE27D3F552D6367A3C5399042B59ED2921DD2ACFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 90589b2d1e693ac33316933a199dcdbc37e55722c215190d4af58cd437cc63e0
MD5 1b019855718f3694f7f1bb2bcf3b0f2e
SHA1 e1c4e84ab97877ba40ab2f7e6bd0861ea00380a1
SHA512 d393388d831a30e7fab56cf825bd6d03fbd6b72fa0d62fc76002b1c352501ba38c298c5171047f65e825e9705cdbefc4a758c72b4f0756b19a24d52b5120899a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb-wal
Size 438KB
SHA256 bcbf361f63aa4095dacb7c8b8dfb49fa8b7c58c02ead9f1328dfd8bad44fea7e
MD5 2573e6770482fe3367e77d101273f692
SHA1 f6988f79d8ced19f334bd22ed90aff52d24cf830
SHA512 a5bb203ec01270ca1049728c0ce5952fd3c112a41dc35a662bac0f09aa93f684f20ae754ef0c9382bfa8c5e993f414c11ce4904f25adde1a3a106a5e23917808
SSDEEP 6144:0Dq6Wy/zDvav6vGSJa/MAyE63GIb0Djcol3tphJMLUcthifcXt:m
TLSH
T14DA421C723249803FFA53BFC7EBDC6AB783B7EF42129114A2485B3590E715460A65ADC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 674KB
SHA256 579a993f05fe72a1ffed148b4b2b7d33694614f53dcbd8f28c90ff7d354c4965
MD5 5f680fc774bf04a1223377159253c9aa
SHA1 36b817be051fcce4d8d753ae75e188a30643fb91
SHA512 de6002b314327fe7d973de262d60bb23836fc6b0d6d72d5489a61fcb0d7ae10d28f1fccb6f8595aa3f68157c0b2372a7e04398805d002cd4aa5901660bb21630
SSDEEP 12288:dLX9JdAcvYvujkxXePq+B7GP0y+6uHUlPi6sd3F+1K92f3m3RBUdkQC:5X9fYvqk9ey+9r567KxgM2fyRBuC
TLSH
T1CFE423EEEDE40476682303F671111F2F9A236643AF3A18FF2051B77363D50A86D466E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 313KB
SHA256 01a3666b1b2348f20c4dee4677ab3228791059d2e1b34486cb999d2e82f09460
MD5 3eb72bc86130a1f4b51bd4436d2499f0
SHA1 31ee873ca279787b3e4fa434b945881911991e0d
SHA512 f17f2937b8578d3d55c74a58390d0dcb54cb35a4d270f14939c129b70471b23ece57107f465906a901a3abe6ffd9a9e39f1de6a1fc675593ed0f2f3053743350
SSDEEP 6144:j84tmyjC3/Qrl3X4j83dxXOYi4k8MF0NJ72KlEgDBEqkFR9ZkYGioURv:I4tXm3Irl3XJ3dxY4k8MY1EbXkYio
TLSH
T1A76423F0CCD203FA1EB95E97A2133B238DC10B747A65E36EBE095C5D282C9742559F85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 708KB
SHA256 9b089249f239f8f7466118c826886b6a9174c0f068d8136bf96b7a1a4576a3b7
MD5 a3a8fa105626b3aad848afbf0b5890f7
SHA1 c105b7c20faf71d4156206bfe38d42d996a3844c
SHA512 86cdf77f85120bd94270fa635c70770823a558c0cddd9709f9b8e5535d63cf91af08eb92326fc4658e1f66650ff29cec81b5d4725a65ad866b01aff894a3e533
SSDEEP 12288:AsBWJVi1RiBimy6usL8mgK+811VTbdDd5JT8BLfUQPNxgEbze8YTio:dmisuq8wP1nTpRfgfUMfHe/uo
TLSH
T199F42380C4EB5DFA4019C88BD4F8E9841DFB3BC495E4B16EE580CF87469AC75AF4A642
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 135KB
SHA256 dff24a104c75fe8ebff2c991cf5a4fc5368af11dcb0c15a1385f29afc9616223
MD5 2d2ba1308840cb986ccf395575694bb4
SHA1 9629e2887775611eea05223f7f459142b19850cc
SHA512 b1452aa54baf38b11c92ecca63edff9c28e6641169d3ac2ae22fbe80431bc430746dbfc1020eba64e27c0cf07564fd7da27c6e0c0ff0c9b15e2746d1807a1045
SSDEEP 3072:AtbHn3v/xvKLTL1Y8F5wrKU5V1SY4OhGYjju7zU7Ox:Ozv/xvKPRY83wGKrSc47z3x
TLSH
T1A9D31224576E900EF61A82A7F77CD283FFD9FD0415AD644AEB10E8EA84798327F5C109
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 381KB
SHA256 42c18006fe81fe2034b4c28bed8432538e17b5e5057e1c0f73f32e050fbd1265
MD5 b53c511400a883e7cdbc2f38ee1f90a1
SHA1 4ff2e234d40354341eca768f31ebba2df8b115b9
SHA512 13321a8492103e12fd8856a259ebc5d7a44eb4208346d3d99615973da3a2b2e9a7f1f7a78f225bfeab67a79375a6dfe65857485a141a3513c23f9a0ef83593bd
SSDEEP 6144:qnZYBSFEbrh9fJ9IuVqeg5lbNEW9iTfHij6+owM3/0U4l6L+jbgLZTZj1FfTJ/D9:qnZqbrJ9xubNKTfHA6rwJHl6Cjg911V3
TLSH
T17684231DCF590314CA6E696690658821EFF8A1E98BC76253B0D0FED717288B44328F7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads