Analysis

  • geolocation tags

    asiadelhiinindia
  • max time kernel
    71s
  • max time network
    72s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    20/10/2026, 18:09

General

  • Target
    NewProject3.apk
  • Size 21.7MB
  • Sample261020-wrerzscf56
  • SHA256 4600086fdfca0693798492f0accf2444e90d4f0376fcaa938e0e07c6dc60f90b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Requests modifying system settings. 1 IoCs
  • Changes the wallpaper (common with ransomware activity) 1 IoCs
  • Enumerates files in the device's shared storage. 1 TTPs 1 IoCs

    Queries the system media store to list files across shared storage, letting the app discover what documents and media are present without opening them.

Processes

  • com.my.newproject3
    1⤵
    • Acquires the wake lock
    • Requests modifying system settings.
    • Changes the wallpaper (common with ransomware activity)
    • Enumerates files in the device's shared storage.
    PID:4102

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 330KB
        • SHA256 8fb76a2b37760930c06f8bd086b2cdebd92e4f89fb4be62cce5450b350339311
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 872KB
        • SHA256 2ed549a74b920bf598b4569d09175343c412e7dbd8ef51c764c49f98cc202279
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 83KB
        • SHA256 fc78498cf1127a7b5893a55cf3758c5998aa3ecfdcb06cdeee238e7d51e46abc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 67KB
        • SHA256 ec1fe15b06770a1a9807e3a9b891236d23a01919e632d1a718cbff3a893891f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wallpaper_orig

        • Path /data/system/users/0/wallpaper_orig
        • Size 872KB
        • SHA256 a2193f98e2d7c9075540e51b8f722d05ff682f9ab4d521361d566c5e9259b2af
        • MD5 SHA1 SHA512 SSDEEP TLSH