Analysis
- max time kernel
7s - max time network
150s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
25/09/2026, 12:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
niuwa-v2-arm32.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
General
- Target niuwa-v2-arm32.apk
- Size 18.0MB
- Sample260925-pp6pcswdkd
- SHA256 d860b8891976c5d97e63057122fa914dc4b06f0e2fa659ccdd360a0d084a6692
- MD5 336cbf9e507f812cdd61a26ec36c286f
- SHA1 e18ce693e6429fde0ff5fa1be4abd06de131b853
- SHA512 19f39953bd021910d61986bab52ddf8b330deeac2b976d69cea84697a0cb8e8b35b5e92370da2a076173069fb9ec25c2fd4c89010d3460284998aeb3742bddb1
- SSDEEP 196608:Zmx+SvthTz9MlfeFJ/wLLpf+38g0e0xFTloplk2rHLUEp:ZwnbTz9OS8AOmlqEp
- TLSH T1C017BF8AF205D915C8ED6372F16DA9C033844F5DE2C62E6AF90CB2343BEE5D41DA3196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.niuwa.niuwa_ai
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/02b02df281f2c97d9ae4423bef2360c5cc606e75.temp
- Size 712B
- SHA256 6c94f0af09ea4b7a1a1161fbe54263281a9353aff125a5f21ef9466742fc1476
- MD5 3ec6fb51b39a86d608ebff843b21fda3
- SHA1 2d3e22356b8e78f329efff973065d6904243150b
- SHA512 eb05c647777d43bb4da6f8a63cb5dc108e1e4f3f514c05e9ed8ad30d164549276e2ddb8fd3ba95fbd956b81015bdbb5941b1b49b0dc6d54ccf6a76fac78d1485
- TLSH T1B901262D9980E217CD07B1BE90C8420B127B7CF6ED91665B3907E7E13D230D6C795EA8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/5d394f8ff44f6f5049a98ab77edced94d6d4c116.temp
- Size 1KB
- SHA256 cd96a99b307a5d207f6f087d2b4f2a7ad057904ef0f64ed26a4406256590258c
- MD5 25906ed9c98bc018e56532d99a73fc42
- SHA1 2cc8b6cc3cd5bbc1ac35c922bafef533fec10f7e
- SHA512 89dbbf37417f8704f3c57687a1ec9803e4fb5194a89f473e9f2fba9b1c9a60a8a6e78a8b490c80955dc09393c2c0aa1e66ea0f085e1b55fc2eecc7fde595cde9
- TLSH T1B031BE098B39D526CE47707DD04A121B023FA9E0DAD0A4E31B0A99A058C31EF835DFDA
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/97a34407f6222f8cd1f28a535a0344a403929f89.temp
- Size 1KB
- SHA256 243f1ea88829f6b3223622e79d22c1975aad4f46fe3ff2f2836a02e61af6bdc7
- MD5 d785fe2f5c61277f125d5dc8e2a88f11
- SHA1 a160911ade6fc988cb4b66c47f02775ea9d55f26
- SHA512 45ae1f6a42719c69d62b532bdec53ee569aba9b65f5ee6276a4d287736bdb3283aaf0bd004f2ce9baccdf77c64faafe48cf7b7c2f4a24ab42fd5f385f70503a2
- TLSH T15C21B8198639CA37CE43707ED149021A027FB9F5D9D0A4B32E47C9A068830EB935DFE8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/ad60c238f3a268b176d669faa0a596bb9ccd77d0.temp
- Size 1KB
- SHA256 54fcf4465da44c29e69488320eb7b9cfbbee15aea7b74d415cd774f770d7280a
- MD5 d633a03f35b220fa402540da1237f43e
- SHA1 bb34df9040999fc1f1dbf46f200a7f4ebb84508f
- SHA512 86ed215f1d63ccc52d6da6511f98bfee23ed6b790f4dddddb7ce64024677dc582ad9874b50445682dd100da8c1f1e8855e695b5d395ec090170a2163ac934808
- TLSH T15121363C96619D66CD4FB07DB246210B11BF7CF0DA5034062A0BA990AC270FBDB61DA9
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/d1532a6c3674896428a222b3362016f7fab77d7c.temp
- Size 1KB
- SHA256 4b52dc3d2317ec09a1dd1601649ef2c090f8a9bcd91decb62b22f2ab00973ccd
- MD5 c543c0d4e18dcd61fbcecebaa9d02b72
- SHA1 f58e61fdc990cd228e3e8a7ba3c4ed849b2c3088
- SHA512 8e44db4ee74dae805d29e0ada701c02ab4c60d136ac37d243fc7e18c3f295ea5084c45899de19dbad2d8a363d9effb653a66dafe469991f7987112f6d8c58040
- TLSH T17231783E93349DB6CA4F707EB045110B527F2CF0DEA038172A0AE58058630EBCB65EE6
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/fa1bcba1eff4282915a5351c8a4bb1537477b2cd.temp
- Size 4KB
- SHA256 525288fe2ebc594ef5bb8d0e643b2fe9c72855778768c60c32c10d9773aa8023
- MD5 d5069e012cf27929b60da0d729ed9abb
- SHA1 80115e5064575535389985137e6fe95c98da21de
- SHA512 4a1525cf817f03066653cf802f61d3e307cece648a15d904a1dafd7f68669ea20f1af1b6b76856c25c40e46c3e471eefe9ba31b9b3d7928a583ef0466fa02924
- SSDEEP 96:wMesLd1yeemg1j0kt49wnAxL8dYEfLG23gLWvM+Z:wZCd1wD1jD3AxIdYgLprD
- TLSH T10E91F12CA5685D2BF82F617F641C440AE6BF90F9C728270B6F09C6509E01FAAE3159D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/n1.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/n1.db-journal
- Size 512B
- SHA256 b0d2b8e8ded57b450c65ee31aa5cccefec5d89bd926cf01ba1223c0d3f31abfb
- MD5 87c06d330d42245bbd4aeb540d5993d8
- SHA1 68fc728b75c84df691a69db7219f2841a886e5ff
- SHA512 c5e8328128b8eab751c62d470582e5b1d5cef9daae4864d1e3b136c6b9b69e68ca97af24617fe157fa54cb9437f68814da0e75562a27aa37b1dbd07f9a1c2400
- MD5 SHA1 SHA512
- Path /data/data/com.niuwa.niuwa_ai/files/n1.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.niuwa.niuwa_ai/files/n1.db-wal
- Size 48KB
- SHA256 87d1a315f3420afd2646f399d23e170e823730541dd4fbe6ab7a79116d124d0f
- MD5 63dc875e8cfacaebe767c8ecedb0f4d0
- SHA1 8f09ec458dc887ac9a19db85090e43c787674c2d
- SHA512 260b106e3725eedff7b88e0cccbbfc87ac437dd112ba3e00f495cf848039a9a1433f3e907067fae596b121bd1960356c7288f732d51f6cef82cb953283e20c72
- SSDEEP 24:KAJ/GnzyGSP/mTkeoElC2SyuWseT0llmDO9toJ9tNwUV4uiNuq/pMCHT4tGSP/mB:nqzNSP/fgUtT6D8ot+889TVSP/x
- TLSH T1CA2379D4EB645643C20AC2F33AB92A3149A45E0C465AFB479ED820306FCE354B874B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/profileInstalled
- Size 24B
- SHA256 6dd00621687fdbf4ba93c4b209e72d6358ba0530c9f3255ac2bc2f198aab7f5e
- MD5 ac8afc5539fb632d76391c463644ef29
- SHA1 ffef0623a266669f4cb4c00ea8a0d6598db70cbb
- SHA512 697560c711002967285f1b2eba78e0f0158f9806ef3a86ea5060dd6c15e3c34cbf94fa7c81281c8a882ea46c516d480b06c1abdad55f34a90fea744f1e260ee5
- MD5 SHA1 SHA512
- Path /data/data/com.niuwa.niuwa_ai/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 6d1beaacc554033986ca1526719df14db95c4f499e0f7db3e09c646f8e8b10f6
- MD5 fcec7dc8bca2c8c9618a224e3902e988
- SHA1 c8ae77cfcda2acaf81dab667478249c69182275f
- SHA512 c55f16ee8ed921dacafd71f25cc80bc0b33b3ec2f76603173f708a7cd76038cca2f686da6b2514963c011bda012ca7b4e6d281405642c374c9fc37b257f31e89
- MD5 SHA1 SHA512
- Path /data/data/com.niuwa.niuwa_ai/files/skills/browser-task/SKILL.md
- Size 2KB
- SHA256 188fa6e61defdb525777578957840f8901681b3e4b885cdf8c2533dac25a8148
- MD5 c41f765b2a7c5957402e5e6cf8841e32
- SHA1 1c27a084682f8239113f4f46cba48c0316c59ee2
- SHA512 bd18a9a696f54b553f300dbfe7d2be3e3d1761af39945e8ca8dfd28491745cce34eaf7d8c656586d8989da9e9dde4ba9534460755198244173b3d90a81801621
- TLSH T1E751967501AD3E9A125660CC7FCAB6B4603D2FCDC1B6A2B4693B585C3F1C64E0253103
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/skills/companion-talk/SKILL.md
- Size 2KB
- SHA256 b5521353d865885868ac9e4d356772d6fdddc6736c7fb5ae55f6f567cfa01480
- MD5 f3f37109e9a3f72ea41bbb6d5470036a
- SHA1 fe5cbce7bcd89dcb2014b4fa7ee3b513e61db314
- SHA512 f3b8823a794aec8a48e14aeeb571b634f9b540206d658f112963e3c1c8c1ada37ca6d9b479f7f408247806b39314395eba0b5746abce5bdbe7fb43304a6cedd2
- TLSH T1A251B473032CFE941E3614B9E6A962A4215CDF87E1638198D336CD3E23196A9AF04642
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/skills/note-taking/SKILL.md
- Size 2KB
- SHA256 0dad4344278531ed9f7304d5f8f45a3109fffbf33d319f0f694f180d0d8e7d75
- MD5 a6d0d0bffd3293fac45b686fe5a60329
- SHA1 b951df3942c7118716adfe1799a9710e026ff11b
- SHA512 b2c02489474eb420e2515f751fa8a1a89135898c854b2d7d849e731a0a4e2c46d8bbe0e45b24cef0283e585a0689e53ea1903568c818c030fe3f704afa191c86
- TLSH T1EB41B66F002D7D870E9932C56F88B196B49C5F31C076DABF8EA3491D2E8C99A080A577
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/skills/nuwa/SKILL.md
- Size 13KB
- SHA256 85605b55bacf9bbaa68c73393ddcad6785f5548b78f05459ca2d18c2f5c5021b
- MD5 44c0af4ff0cdb0b39baa7524f3f620e2
- SHA1 d0aae274915b10a8068157bf077f3943329a3a61
- SHA512 7e8772d2d094ac09871eb759c7f552010256224f45c439edbcc8cf066274b84e5c7ec1fa182854eab540ab26bb0a0505c6da738dd56043eaa88d5a4641de94b9
- SSDEEP 384:TZ6DJIxSRGY5ipTjpesi0tkCihOkrD18dQI/7:TZ6uxSCVeZjlhnE7
- TLSH T151523A2E0F5CBCE8053395E4374E91E8E00D8D9FA1ABAA75DE65F90C739DF4A410A513
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.niuwa.niuwa_ai/files/skills/web-research/SKILL.md
- Size 1KB
- SHA256 d9ea3e5c5217903e363d2b6d8aa5eed52f688be7b8da788a0146757c1f8d1a93
- MD5 8d27ed1db3899d4795a7478912f7558b
- SHA1 4465b3dd9ff6b98133d7c744fb823e49781a65ca
- SHA512 e72574527011605d75b53a0f0ab9852311d4ce7d1f1cb4a39cc6846f3b12be26e0557c3bf7fb714a94a812e86b956a5e0cb331711ba478e49fadd59cb0457056
- TLSH T19641C8164ACEFC680AB965E1374B72EC291B9A01A0708234C527CE6FBD4CCDD1242A83
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.niuwa.niuwa_ai/primary.prof
- Size 193B
- SHA256 28489d9664cd4f5f2e9ad06330747cab93f1ea9755ab004d07c17b254441c7e8
- MD5 49003d2f1d06104a003853e453d90f27
- SHA1 d137f3bd61af845e46cece2b192ef2c862581513
- SHA512 6d8810290a78b80de48e65079649e2444ee23bb389c3b4909f356959ba10fb5218a5e2892b11220472a1b6b3ee002075e953a2be5142dbc075fa9f7b531f641c
- TLSH T1E4C022A4009206F0DA2A00D08AA5A90B2F8820C8840BADAB4E483DBE4882AD4C80B03A
- MD5 SHA1 SHA512 TLSH