Resubmissions

08/07/2026, 16:09

260708-tl4stacs3q

08/07/2026, 16:01

260708-tgeywsb19l6

Analysis

  • user interaction
    yes
  • max time kernel
    390s
  • max time network
    370s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    08/07/2026, 16:01

General

  • Target
    AzraielWallpaperNew.apk
  • Size 84.7MB
  • Sample260708-tgeywsb19l
  • SHA256 e841c477978aa2ae64ec0b9d212b1b416cb1ba1d056f80465909e4da41e86512
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity) 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.example.azraielwallpaper
    1⤵
    • Changes the wallpaper (common with ransomware activity)
    • Schedules tasks to execute at a specified time
    PID:5022

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.example.azraielwallpaper/files/profileInstalled
        • Size 24B
        • SHA256 a0d1896c732fc415bb8b18488893d00df42d1af86b7e7f858c07d9b02b594afd
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb
        • Size 104KB
        • SHA256 5f51a0f3ca75563dc5afdc1b0a78b2c5a0ca362891fd0bbf12a3c2a07b8e1dbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 d45f3bde9dc269bfc88095950625785edf24c921ab4a713075e9c172c32cfd8e
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.example.azraielwallpaper/no_backup/androidx.work.workdb-wal
        • Size 406KB
        • SHA256 d980257370b0f1a5bed47ce02c6ab2eb80103e1ff2d8387f0bb585fed908efdc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 202KB
        • SHA256 1bfe223a96e729cbf293cc361e843fc901a84063b11552255a2433fe855a031d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 539KB
        • SHA256 2c68e53e78d9928c92a647572d0573ad9445e14cfcebfc14b3b31a6310ad95c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 628KB
        • SHA256 f027cfbda03cc0a7f57cdb7349a1dbf74c58c833c285bd2b47c254d7390ac050
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 381KB
        • SHA256 2c4450fffd9ff6b89dfcb27f10455745e3eb08abb879a198b4000d6ed39b30ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 230KB
        • SHA256 dcad9aa8583ce1501da1f2a97118ab2f6d763665e94ca58891bb622e4bc2097c
        • MD5 SHA1 SHA512 SSDEEP TLSH