Analysis

  • max time kernel
    7s
  • max time network
    150s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    25/09/2026, 12:31

General

  • Target
    niuwa-v2-arm32.apk
  • Size 18.0MB
  • Sample260925-pp6pcswdkd
  • SHA256 d860b8891976c5d97e63057122fa914dc4b06f0e2fa659ccdd360a0d084a6692
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • com.niuwa.niuwa_ai
    1⤵
    • Checks CPU information
    PID:4294

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        02b02df281f2c97d9ae4423bef2360c5cc606e75.temp

        • Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/02b02df281f2c97d9ae4423bef2360c5cc606e75.temp
        • Size 712B
        • SHA256 6c94f0af09ea4b7a1a1161fbe54263281a9353aff125a5f21ef9466742fc1476
        • MD5 SHA1 SHA512 TLSH

        5d394f8ff44f6f5049a98ab77edced94d6d4c116.temp

        • Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/5d394f8ff44f6f5049a98ab77edced94d6d4c116.temp
        • Size 1KB
        • SHA256 cd96a99b307a5d207f6f087d2b4f2a7ad057904ef0f64ed26a4406256590258c
        • MD5 SHA1 SHA512 TLSH

        97a34407f6222f8cd1f28a535a0344a403929f89.temp

        • Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/97a34407f6222f8cd1f28a535a0344a403929f89.temp
        • Size 1KB
        • SHA256 243f1ea88829f6b3223622e79d22c1975aad4f46fe3ff2f2836a02e61af6bdc7
        • MD5 SHA1 SHA512 TLSH

        ad60c238f3a268b176d669faa0a596bb9ccd77d0.temp

        • Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/ad60c238f3a268b176d669faa0a596bb9ccd77d0.temp
        • Size 1KB
        • SHA256 54fcf4465da44c29e69488320eb7b9cfbbee15aea7b74d415cd774f770d7280a
        • MD5 SHA1 SHA512 TLSH

        d1532a6c3674896428a222b3362016f7fab77d7c.temp

        • Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/d1532a6c3674896428a222b3362016f7fab77d7c.temp
        • Size 1KB
        • SHA256 4b52dc3d2317ec09a1dd1601649ef2c090f8a9bcd91decb62b22f2ab00973ccd
        • MD5 SHA1 SHA512 TLSH

        fa1bcba1eff4282915a5351c8a4bb1537477b2cd.temp

        • Path /data/data/com.niuwa.niuwa_ai/code_cache/flutter_engine/0cd610717bde95fd88343c64f81c11ba4e5c0010/skia/e9ed4fc9f1544c58d8a9347c1fc9471d8dd7c465/fa1bcba1eff4282915a5351c8a4bb1537477b2cd.temp
        • Size 4KB
        • SHA256 525288fe2ebc594ef5bb8d0e643b2fe9c72855778768c60c32c10d9773aa8023
        • MD5 SHA1 SHA512 SSDEEP TLSH

        n1.db

        • Path /data/data/com.niuwa.niuwa_ai/files/n1.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        n1.db-journal

        • Path /data/data/com.niuwa.niuwa_ai/files/n1.db-journal
        • Size 512B
        • SHA256 b0d2b8e8ded57b450c65ee31aa5cccefec5d89bd926cf01ba1223c0d3f31abfb
        • MD5 SHA1 SHA512

        n1.db-shm

        • Path /data/data/com.niuwa.niuwa_ai/files/n1.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        n1.db-wal

        • Path /data/data/com.niuwa.niuwa_ai/files/n1.db-wal
        • Size 48KB
        • SHA256 87d1a315f3420afd2646f399d23e170e823730541dd4fbe6ab7a79116d124d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.niuwa.niuwa_ai/files/profileInstalled
        • Size 24B
        • SHA256 6dd00621687fdbf4ba93c4b209e72d6358ba0530c9f3255ac2bc2f198aab7f5e
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.niuwa.niuwa_ai/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 6d1beaacc554033986ca1526719df14db95c4f499e0f7db3e09c646f8e8b10f6
        • MD5 SHA1 SHA512

        SKILL.md

        • Path /data/data/com.niuwa.niuwa_ai/files/skills/browser-task/SKILL.md
        • Size 2KB
        • SHA256 188fa6e61defdb525777578957840f8901681b3e4b885cdf8c2533dac25a8148
        • MD5 SHA1 SHA512 TLSH

        SKILL.md

        • Path /data/data/com.niuwa.niuwa_ai/files/skills/companion-talk/SKILL.md
        • Size 2KB
        • SHA256 b5521353d865885868ac9e4d356772d6fdddc6736c7fb5ae55f6f567cfa01480
        • MD5 SHA1 SHA512 TLSH

        SKILL.md

        • Path /data/data/com.niuwa.niuwa_ai/files/skills/note-taking/SKILL.md
        • Size 2KB
        • SHA256 0dad4344278531ed9f7304d5f8f45a3109fffbf33d319f0f694f180d0d8e7d75
        • MD5 SHA1 SHA512 TLSH

        SKILL.md

        • Path /data/data/com.niuwa.niuwa_ai/files/skills/nuwa/SKILL.md
        • Size 13KB
        • SHA256 85605b55bacf9bbaa68c73393ddcad6785f5548b78f05459ca2d18c2f5c5021b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SKILL.md

        • Path /data/data/com.niuwa.niuwa_ai/files/skills/web-research/SKILL.md
        • Size 1KB
        • SHA256 d9ea3e5c5217903e363d2b6d8aa5eed52f688be7b8da788a0146757c1f8d1a93
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.niuwa.niuwa_ai/primary.prof
        • Size 193B
        • SHA256 28489d9664cd4f5f2e9ad06330747cab93f1ea9755ab004d07c17b254441c7e8
        • MD5 SHA1 SHA512 TLSH