Analysis
-
max time kernel
46s -
max time network
57s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
26-07-2024 23:34
Static task
static1
Behavioral task
behavioral1
Sample
youtube-revanced_v19.11.43-patches_v4.8.3.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
youtube-revanced_v19.11.43-patches_v4.8.3.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
youtube-revanced_v19.11.43-patches_v4.8.3.apk
-
Size
140.0MB
-
MD5
2edd0e8e876a7026d7d76cc6402a0bae
-
SHA1
fb6d67158bf5424cb7fae3231f67a6fcb284093e
-
SHA256
1e3622c84339038b686b7df0be887750a82efc8f1fa53b9532d66690b6a404a7
-
SHA512
49b3b137a70dfb1ee29fa051717c11c36855f86b1923761aa68e2930e652308d5294cd43e5b4d8c17d4fa48c6bad194cebe1292ca8829537d07e7a530bff6390
-
SSDEEP
3145728:DFAqlIhx060V8QsTsXRx2VM6YyuANHCDWUjivjR1P7OpRlGLPMGC:KQxGNHCKL91P7OpzGnC
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
app.revanced.android.youtubedescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses app.revanced.android.youtube -
Acquires the wake lock 1 IoCs
Processes:
app.revanced.android.youtubedescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock app.revanced.android.youtube -
Queries information about active data network 1 TTPs 1 IoCs
Processes:
app.revanced.android.youtubedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.revanced.android.youtube -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
app.revanced.android.youtubedescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone app.revanced.android.youtube -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
app.revanced.android.youtubedescription ioc process Framework service call android.app.IActivityManager.registerReceiver app.revanced.android.youtube -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes:
app.revanced.android.youtubedescription ioc process Framework service call android.app.job.IJobScheduler.schedule app.revanced.android.youtube -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
app.revanced.android.youtubedescription ioc process Framework API call javax.crypto.Cipher.doFinal app.revanced.android.youtube
Processes
-
app.revanced.android.youtube1⤵
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4261
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5b505176427d7a39e061376ac2386dde1
SHA14b18624a8d042c59a9d7bc52c9e5d2c0c5a28784
SHA2564e983048ec350842cbbbaafd0393d962bd977422549f85c45ed36d908f708643
SHA5121e723bec59538a838b6721e55a653633fe8c41a5a46be1a4eedc3a85fa405e5ef9a0cf81c2b531231e8f0abcfa3a3f1f5e5fe7ebfed0cacaf9b46ddb7e70e3ca
-
/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
Filesize512B
MD5b9bf04487b8995cad7ead4d4fddf1d6a
SHA136814f2285cc0edfb972da9c0512756e0328bd9d
SHA256cd2e4b2a3776e731d259dcc7e89adb131ecea81a13c8f8927a54e5cb5eae834e
SHA5122eaa2b1c968326eaf208229029406d4f373bb4bb823d560af8809a41ea63a441614ded269a1312b75cc8ada69c1e66c3bd8db6bed47ae800168e92ac1df4cec1
-
/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-wal
Filesize60KB
MD5333386d10daee8157fff61fba368f660
SHA1e105db3d8db5d4cdf85b7014180c61faffcab6a4
SHA2566ec9dd78686abb34ec0a1b1d82878295fffdde98308d45e73eefb18668103c14
SHA512c5afc64cbb271d3fee715993fad6e4a32f8668bd41706e05c1e2a2429524f9c8609ecd9e3311e7d66192e31e92e882aa6c4e69ffcfa845e654f12f72dee194f9
-
Filesize
28KB
MD584439aea141edbe69204e17b6e1ee2e5
SHA11defccf3b6014188619759382572aa3ab2e85f0c
SHA2565b90be0fb11891095d6d9b552655665a6f6a61c0cc6af233a88e81671ac83dca
SHA51223bd4381c10bb224209c21d44f92c079e9b762da943a28a05999d1809b96856155525afcf8b652f243d892e4007b35ed8c17fcf1454689c1ec0ae79c16090124
-
Filesize
512B
MD553d6dda0f2b3a807e1c3c68da0eeba68
SHA13f0dc10fa3a2f4ff2e9dc7fa9068d31fe0dc2670
SHA2560301adf9f5a701aed6dde29cf7eb4e886ef3e0c338a685898e18e0652dd55744
SHA512f21ae1b7f51b6e4a997cec609abda17bd277f9ab287ae0fb8bcbf53b6d26b6fdd9bebf3642bcb6d56894f71c49f7b24118e84b7c4a768b8ce763a7bc80b01a8e
-
Filesize
16KB
MD5d9315101ba6cab71580d37d7f1093c17
SHA1bbe58bbfd9b0905bc08841f2f3e604d74808224d
SHA25694a21bed6810cb17dfd0543bd29881208bebc4562d3a93db69629d237d48bd0c
SHA5129cfea5443a4646a44e831590247e4e0ac41db72b3d4e0062c0e7f898b5795f66ee365bb7e6481a07185ffd93f4b30aa7abc6c542e956c912c529e697ba30d55a
-
Filesize
40KB
MD57e34ad5e515a1e6d3c00fb4034352937
SHA137220f31092cb5b9e10032aa8623b803ead17804
SHA2560feebde644cd99d6da5bca560bcaf3cb741f40c9da12f420c55d0c6b787aa901
SHA512fa2293ffb0ada63bc843350a64fa931a77d043c3c6ff7ce96e0779c2ed051d1903d0346004caa936c59fbccda5c554830a1e1a1e085fe8eb3df93b291a9dfda3
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5b6cc10bb3239baa372c64faa19ca707b
SHA1dd43566c983301b50b38862efdd24fdfcf868c29
SHA256f2208560b17919cfc90ee19ad7685f0d6454d91ab829b975f067b5562322c955
SHA5129d6656d2ef1d14826619e54c4fb71b735be419e79f18d2ca6ea6b701fa6bc499e77c2609ec6b9ae511466c3ceba59e5bba2cb95bc2e63ecda3506abb8c5dc8ba
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
40KB
MD55f739214529451b563acc47c17a61c37
SHA1479a7ff21cd4db2d844ffb59977992c66c2621bc
SHA256402e386c37c1ee994596bf6447e887988f2ef7f613ee222e2d36ab4ae26c177a
SHA512498f2dcf800f6ce816915475e57f9298f7393f8ef3505ab76267a63a6bb04f3c2a52ea4ccade6b259413863a51fcb45f84e929d77db3373549d6f23e8c91f2e0
-
Filesize
512B
MD59fcc93fe8ff1351ef061b6a3beda6722
SHA13ceee2906585c8a00a32d0f8b66f142cf1b39f43
SHA2565b99b41513436660c824de5f89563ebc359f2fcf791479631daf2ec0a7093450
SHA512a45e46a14ca9939ffc4dc6f00f887bc46168d99a618366d61d83ae911f6d52cfb12819853a33f163547eb6e5ee6cef0424a689119bc70b4d8ae7c4ccb71b40de
-
Filesize
32KB
MD528519519e24426a68f16838a95f834ab
SHA10986571a5108a0d60bcc41e045663d0695ffc8b4
SHA256d7b7336a95b2662c898425cc3ef3ef15735ab6d3226603ae5fae83dd787e83c8
SHA512720d0f7c69db8d828055a8f4ad4b4e7faf083f7f30db8147232a4d2d0aeb2077b80b026e1058596e9f63350006dd3bb6f9428e381e2bd8da98cff2aa4dcdc15f
-
Filesize
8B
MD5911e16e9e54b4a7686a1ab2c8e67da5a
SHA14cf33aa31f70e2f317cc10fb95336dd5739eb50a
SHA256263fdf56221a887502bbdfab53c0bf4cabfd513b3fc5d5c65028e103800371a8
SHA512d4687e04fc6dad26a9d600eba74cd51172271fca98899a374a4fd2694ff5d8f7079674ce0116dbbfe79ac5f04f3f48b34ac65eb4d5bc772b9baf5d46b1816642
-
Filesize
10B
MD52e9a449f0d18202dce4c6cc179759500
SHA1e6856e12f500f1adc42bca4bb72dfd50952f9de7
SHA2569db47b465439de4dc3118c0f4823957ac53624c86b0a9dfb253c9033953e4c92
SHA512528dc9c709e18b58439dcf901626f302ed489b1f1034d8a1a3112c6f0106090dbfaa176480c6e07fbe67285a5bb3473853f604ed74379f2d849525d10a0de854
-
Filesize
99B
MD5672ac439e96b2de7415b6f97ab9ff02d
SHA1242a384b42f6d7ac0871925cc69b5e00e59d5a58
SHA2563d35849024520f6d966a73d9dc5defbd6528149bbef7d3579eef5d67e351f253
SHA512148f76371a752c4dee90531f8c3e3c5a72e803bfc05f9cbb81217d178fc141e3c102163a009705f7934b0ab8b445ebfc31dced02d6ec691cebb8bdd13f051ec6
-
Filesize
99B
MD5b837c104826bf6a378b7ae8d1eab34fa
SHA15b314bfedbb8c3cdcb3659faf989f572c09929c7
SHA25655ea3eb3c8d84d3be1599c9514f47ba2d1e9b29d97d2337fb7240b1d96322ec3
SHA512937768d861981acc1c7811adc881e18b61995ae3549bf818c2be924e9c957d6a617f8b6aad0a2b99b02fdc031048a400e33d936e7be3ac9c0f19d87c06824772
-
Filesize
13B
MD533349c731f641bf80b3ed50bd883e253
SHA106c315afe1e97752a24cf09a0dc965cc156393ab
SHA25654000ba5016f4d6b85519a75c2a07df8e267901c0d80490eeb282932e51c5f9c
SHA512092c9700f81d95c3c2821552cacaf99bc7def9aa8a00d7f1dd44472813fead01a605c4edf7e68fcd272519db60366fdadde92b874cf684bb1dcfa2b2d411c1f4
-
Filesize
13B
MD57f24649329c2ee05680d1eac8a163e35
SHA1d0dcd6cb43cd93996915b70e8fa36d12afdb5aa1
SHA256e68621a1b52fd71d55c0ba4e188702271ba6c2aaf66dc418a934a73d65bec6e5
SHA512d240c02212d0ca2061a91e97e2917217e74cb018ea1f5ac4c5a72138badc787825757d9ea0786aeed103f2b94cfeda2b262e16aebd135589bdd5ed44e60917c1
-
Filesize
34B
MD5672b2d5d990edcd1bc5314d510d906d3
SHA15c736499703a3a77d5cec19f3ba07288d962c2a0
SHA256b96b661cb876335b9b950218574e56acd40046b3a261b32a60a0cb5157e06912
SHA512d06ca4f4c90c0b133ce0e820722e9f84b5c84cf5b4de7ad7c5656b8224ce95bdc9d23dc8bbf92552825636e79503cce80ed6687987328e3cc5a2a77969108487
-
Filesize
75B
MD593c29d3bdc43931eec42da2d35ffb172
SHA132ac1f32a135c37244583eb2df0e7f313719f4b0
SHA2569163e98335b75a83eeb37ef5d6092830a922a0aede6dd4c7839f6ac0fa0f2262
SHA512bc1e3f97b90d0cc0159ed0b277b4f7b860a1700392298505de1da9a2eca9ef3b810b39e14978256aaeb40bd6d8f1cd0ee1cc12a04289047fd90a703458637fbe
-
Filesize
118B
MD573fe3bb10feca6a537a028475d312bba
SHA1efb4aecb6fbd0a7769ddf42bb38fef840a9f03e0
SHA256c9adec496d1be6fd9754dadf06943fe5d9f0769d8d4ab514a2596cedf0d8fda5
SHA512433cf8ad543af29ae95a4e0212f7257b21385a89d2910c7b3ffa071497091d888d3d87a26113cffd1b583df6286f45267eb3f1bafec68795c60f5d1a0a07169c
-
Filesize
157B
MD5b473082598f965647363cb2da37ddf4f
SHA1634c0b85a1ca2fc8f7b7a89b66d35979266f15d9
SHA2560ee3fa24ccbd81301045258e0f861c2e5db07d5204695f65a8ce58fa61ac0ea0
SHA512cb129387cbab90aed64f5246b6cf3def389417976c59713032b51000b853fb531d15e637a93af51c2551022ea3b82d53593a3ba02be78948f6adf740e3e63ecd
-
Filesize
27B
MD5bd46378c092c12889b85b3c388249743
SHA1bd44b07f7ff8f747faebca20a57a936139b321ac
SHA2561df552c9c9b8b6b82f47d98ab3aa68920f6760343e3d413ea90d73233c772041
SHA512e5ac3040892ee4df724a9040284547d0c1a9dffe2222e998591479d17bc21fc28d6d6594bc31bd556f9419f257c75143a953962e31f06bca1235bc2538a84650
-
Filesize
41B
MD5f49fd157ea98431967e1e457ad031059
SHA150fe75c53463c63f34f1e1b9f42c309c5d1201b9
SHA25624cde8f22c337a14c96ca9677ff3c47fd30a39854e73fd28e14c396c76eff080
SHA5122c0ac40d0b7225383051fc66ff396fbd6dead36a5325444d932403cf628f3fe83aa8442193d8d75487465a32dc8f6a32f051c50b107b6fadffd7fad0fe679c72
-
Filesize
2B
MD5cd86b405bbe681ca983587a331df6810
SHA122435ce0ab6cc76688f64be801bb4fab84c23353
SHA256ffd2b38b328fe2e10d03587fb8dad5dd902305255aa5d7ec9e6a56ea6c0bdc62
SHA512f7170de951bb964cf48525929e971e52e988b78c37c251480ee3d117c921b646167e3f8f2de2e0af363988edd3d62f06a33bca5595608fc67842db6b9cb756e7
-
Filesize
26B
MD50c3c9c5f1bff356583139f0dff436e9d
SHA1c34dc99b7770baa6a296f890b1e8efbec537a40e
SHA25682b89f89fec2eb1f3223c620b7fb432b220aac3b6c9efc800ab0da681bd0ad66
SHA5123bf4a93424b2082b355142e247074e9cac043ce545cba74647c96db3114b9310c7947160d31b3c508a6ea523bdfd2563a278570125f2098940e58f34cfe46107
-
Filesize
2B
MD5a004f5605a9a75880611e5e713c694cd
SHA15072d54b7f4780c9e6a49beb3f852c191091d49c
SHA256f8bf02b74055ba2b2386a34bca9a3c1e96435781363d7fd461fdb98d201b005f
SHA512c1fd50d94960a5098a734899770ec5aca63d1c6208032d9046acd14aae7123befdd048366af0cd0f40520e4eabd323e6d1e55f8a8aaa3bccc476239a83effc5f
-
Filesize
4B
MD56105622d85317ac08f87319d7de9a9be
SHA186316c575ab2d13dc4643e62097424e741c661db
SHA256402f869978c5ef4ce822369a3fb53d1772080ada0af0724c4119e35257aa2683
SHA5120f1bc0d3b51b7d72c10ef2f866772d9a7d093d4736f3e24b02f157a377cdf18c29b99e41d6599437958df46640fd9d33a19bece02f800c7722e7e69eab5bbd04
-
Filesize
2B
MD5f7c57f06a1d3ce117749fc98e2111668
SHA14f8190a08041a67360ceea6c64f9be3ffb59b602
SHA256fb8da7eb5b1b399e7321179dac9e9f65773d7331e1e30554e3911e4325e1ef19
SHA5122043234b7e657e122399d2c2a4309b9398ff426c6ba2b66be8fb9ad8c6942cb124cc6a327b9d687b0c25db20e996f8b41d6bb389e1ffd7019f82584b19eee24f
-
Filesize
872B
MD50e21d8057b49b685396277ab590901a1
SHA1764e217b48798adbceb0b1627afefec432679bcc
SHA25650c3631d8ede572a34ed31c33b0b426abe067ffa9eb71f485036655611c3edc7
SHA51222aa30c81b24c47033fcd985a5a0f16cab66a8f823ebcb1f712f5a791f88c9e5c014d8d22bcb638eac2d4f8bf9c4ac4e7ad51c91cee8d3ddae771864591f0713
-
Filesize
872B
MD592d077814d380a6dec06a509420d3d87
SHA113ac496a93d3a854b429a8529b329e2b146836a2
SHA25686e13ba3a16fcc456e40922560f9805fd5bf792ee13f5696e50cd98a78248c50
SHA51286632023989f3d433b1dc9fae2304c62474c5fa081aad97eda7676c61c3729d483d31857783cc82add38e3d6660b7512540d53cec5ccbd6dc3aabb1a91cfd6f0
-
Filesize
4B
MD5c50abd0cadaba0ce009cbcdbd9b3a51c
SHA1e1e174ee069ccda00ae8e1798341adec5f0b92ce
SHA25629d131a5cb76c5b00d437d1ed603f8e75030700b032e6abdaea94ba9af18c46e
SHA512be6ecb5f42c617beb5d8ae923881c8c8487d78c6dd4395a83f669629082cf02b5bc601ad505bc159212881b1cdc6dcd09e0bc15388d63ab28f36e0a7ad7aaea4
-
Filesize
104KB
MD5900cffda15623f3260c09937e29c0ef8
SHA191e89100da066158b9c8faeabf082db417731075
SHA256e92118a000beed677b7a02aaec33680cb8b874d42db71238119de7d7d7adbefc
SHA5127557bafe4ada6ed08c362dd9fabb03d6683d464c6ecedd1ba09c458f4624a1ead8735546ecb41a841c5201392d1c78f1506d7d0142187b8c83d3398d20908e66
-
Filesize
512B
MD551e390c304929a00e207753b0ad26e59
SHA1eb3beaeffe3e16ab7720141760473d2f6d83c5f4
SHA2563b01db4b59b2ce98c072b3144ec9b94647158bd48080cb4e529a464a73edd629
SHA512f693619dbc8c2fa81f650e81c6d965998dd747923cf639056f120cf924e3c26e3132ac3b81100d5d8a87e45f8fd289435360feebab1d9e8f3acf5d6c134605d0
-
Filesize
16KB
MD51d9f0f0376c925b95e507b0d9c5dbacd
SHA107dedffd3b457a43fd7324a157e87030b5f80b43
SHA256d81174a7ae64c53a0bc055e84aad20854cf310ed3c3cf39724cae6cb6b8745dd
SHA512bf777e7bab16e5ef2ef4c3c43a0c75e99b7f26ae2ab6f4fe6fb2eff01d06fc18a0ac4627d13c66c8784963d5eddd3a30df45a695e45957f699db568a5c285918
-
Filesize
116KB
MD5601d100f1472994256b19779e718afa1
SHA1ee8e38403d6a753a36cb2a17c9e12d1abe003edf
SHA256c906cd13a07f5d0837e7bab93c786b3ab4f8d69d4ef9e77ba62b6486d7e8d011
SHA5124df4381a3b2e923cf6e34a95042cc7fad643c47e6038a634057df6f9d73eff957d2a48bf0bae5d42534e8b840dfae605bf26663413aebdd6e806b657542e390f
-
Filesize
438KB
MD5ea752506540118e5b42a3575f6592c1c
SHA128881934008bc0f212778980d2256cc5e616a2d8
SHA2565de48c1c440412f6aa5fbf8abc21d2f4e5eba82e6c01f63b8a35aa7e8747313f
SHA5129c9a7a2e0dad0bd9298da74ad4f865e70fd2c6f801e0ce2a8089105cb9e13b7891470453fe5534c945988412b728611ffa40b0b68d88604479eff658d29bacfa