Overview

overview

8

Static

static

6

revanced.n....1.apk

android-9-x86

8

revanced.n....1.apk

android-10-x64

8

Analysis

  • max time kernel
    95s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    09/11/2024, 23:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    revanced.net_revanced_youtube_v19.43.41_cli5.0.0.10_p5.0.0.1.apk
  • Size 155.7MB
  • Sample241109-3cp3qsxlar
  • SHA256 c5e49e1f2fef34a743e5c4ea58d26fd57086e11259da86b1b888ab8dbc203822
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • app.revanced.android.youtube
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5174

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1727730429792.jar
        • Path /data/data/app.revanced.android.youtube/cache/1727730429792.jar
        • Size 10KB
        • SHA256 eb2db124fd838980be872d31d8b6ec5c0738b0a047386487c6336d74ab520bc3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore
        • Size 20KB
        • SHA256 14fa9e40a1a73e81009cea798d69515a24eaaf46f14357bdc0ea45b02db8dfcc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 512B
        • SHA256 0933a9a426dada139c60d6a28a0d9aa6e3ee10264431a0f14b6a6ad5b568ad27
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 8KB
        • SHA256 75b039911481c8dd3666db42459079ad79274668bc5df7fb2f998eba07e94471
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 8KB
        • SHA256 820da40510c478e9f1b9f647522781180151aca72adb801b1116d0893e5e2eeb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 12KB
        • SHA256 043882df7dad6402c8c70e76a6ef213c6dcaef69c493704c04a2375ad258ee7c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 8KB
        • SHA256 d99dd2f693043d22da9d04edf1f199826d0bf63e7374763be9324f4bd1f87368
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 12KB
        • SHA256 78cc72da25a840cd4a0b6ca54d6f858247c7bb146abc78f7e70167aa77cd55e8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        default.entitystore
        • Path /data/data/app.revanced.android.youtube/databases/default.entitystore
        • Size 28KB
        • SHA256 5b90be0fb11891095d6d9b552655665a6f6a61c0cc6af233a88e81671ac83dca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        default.entitystore-journal
        • Path /data/data/app.revanced.android.youtube/databases/default.entitystore-journal
        • Size 512B
        • SHA256 7a4d1cd0fc273aff3ba51cae2a0140aac384079cba724627efd8e2a8458c0d01
        • MD5 SHA1 SHA512
        Submit Download

        default.entitystore-wal
        • Path /data/data/app.revanced.android.youtube/databases/default.entitystore-wal
        • Size 16KB
        • SHA256 d3616d887ef6f86bd22a6cb243e1e895bdd08666e3c7553acf79ff0c7797d59b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        default.entitystore-wal
        • Path /data/data/app.revanced.android.youtube/databases/default.entitystore-wal
        • Size 40KB
        • SHA256 df715c942876f7f2c7f573ef5f3b69bad1b2cfabd4fcdc898d106e52812f4231
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        identity.db
        • Path /data/data/app.revanced.android.youtube/databases/identity.db
        • Size 28KB
        • SHA256 07b17ad106ec556851ca0f52a91d76f74f02147527e998a73e07b3dc6f66148f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        identity.db-journal
        • Path /data/data/app.revanced.android.youtube/databases/identity.db-journal
        • Size 8KB
        • SHA256 66ae098490de593fbc0d9169f74bd561609509af3b14687fb7a514b62f36645c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        identity.db-journal
        • Path /data/data/app.revanced.android.youtube/databases/identity.db-journal
        • Size 8KB
        • SHA256 b946ba3412fce493f0d1678c46f1bf3dea8fb3151df8f5e20152aa4b4859ae34
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        identity.db-journal
        • Path /data/data/app.revanced.android.youtube/databases/identity.db-journal
        • Size 512B
        • SHA256 580f4617a198c702acafc209bbad6ac1241ffe092df782fa8eba4a67a1cfd0fd
        • MD5 SHA1 SHA512
        Submit Download

        youtube_upload_service
        • Path /data/data/app.revanced.android.youtube/databases/youtube_upload_service
        • Size 20KB
        • SHA256 3d24372d67f0514824283b16860f991da52c25ca3a5ec997f22d32b4c392e274
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        youtube_upload_service-journal
        • Path /data/data/app.revanced.android.youtube/databases/youtube_upload_service-journal
        • Size 512B
        • SHA256 b9cbb5ea33090f3cd8f7503d36425172f1c8b7743872be222ce7499ae756b16e
        • MD5 SHA1 SHA512
        Submit Download

        youtube_upload_service-journal
        • Path /data/data/app.revanced.android.youtube/databases/youtube_upload_service-journal
        • Size 8KB
        • SHA256 71b3addd77dbd5bdf78717998ac44873771b39d0af8a323c5511454282519fd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        youtube_upload_service-journal
        • Path /data/data/app.revanced.android.youtube/databases/youtube_upload_service-journal
        • Size 8KB
        • SHA256 c291f29abc37eda0a32f21a43399e9bc7e32b9dbf7e82b730c16cd97e5af24a8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        103795117
        • Path /data/data/app.revanced.android.youtube/files/103795117
        • Size 8B
        • SHA256 e44b9c599ded14edf2ed8ce6eead8a0497602ba39190861333ea29fa1aebf5fa
        • MD5 SHA1 SHA512
        Submit Download

        103795117
        • Path /data/data/app.revanced.android.youtube/files/103795117
        • Size 10B
        • SHA256 bdae29ece119f53e572432b47e52b5568543527d0bb81f64bafbdcbce659d56e
        • MD5 SHA1 SHA512
        Submit Download

        AccountData.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/AccountData.pb.tmp
        • Size 99B
        • SHA256 3d35849024520f6d966a73d9dc5defbd6528149bbef7d3579eef5d67e351f253
        • MD5 SHA1 SHA512
        Submit Download

        AccountData.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/AccountData.pb.tmp
        • Size 99B
        • SHA256 55ea3eb3c8d84d3be1599c9514f47ba2d1e9b29d97d2337fb7240b1d96322ec3
        • MD5 SHA1 SHA512
        Submit Download

        AccountSyncData.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/AccountSyncData.pb.tmp
        • Size 13B
        • SHA256 b375db26e3e0ed581ecb34b7f6a6b9ef125b6446f202ca087df1e7dd03a7c047
        • MD5 SHA1 SHA512
        Submit Download

        AccountSyncData.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/AccountSyncData.pb.tmp
        • Size 13B
        • SHA256 64eb141f43a5b0ffdceb29d2541f0d53282a8c1cd4edb0af851fb621ecf251ce
        • MD5 SHA1 SHA512
        Submit Download

        theme_proto.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/commonui/shared/theme_proto.pb.tmp
        • Size 19B
        • SHA256 d7b330b8ae0e09f8c190dec7ab256ca4716f635705307f93f79f6d09c8bea1ef
        • MD5 SHA1 SHA512
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 34B
        • SHA256 b96b661cb876335b9b950218574e56acd40046b3a261b32a60a0cb5157e06912
        • MD5 SHA1 SHA512
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 75B
        • SHA256 9163e98335b75a83eeb37ef5d6092830a922a0aede6dd4c7839f6ac0fa0f2262
        • MD5 SHA1 SHA512
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 118B
        • SHA256 c9adec496d1be6fd9754dadf06943fe5d9f0769d8d4ab514a2596cedf0d8fda5
        • MD5 SHA1 SHA512
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 157B
        • SHA256 0ee3fa24ccbd81301045258e0f861c2e5db07d5204695f65a8ce58fa61ac0ea0
        • MD5 SHA1 SHA512
        Submit Download

        LoggingState.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/mdd_pds_config/shared/LoggingState.pb.tmp
        • Size 14B
        • SHA256 f560455a5db739897167f866a399ffdc59da4960a30e399b044d1075b395f451
        • MD5 SHA1 SHA512
        Submit Download

        LoggingState.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/mdd_pds_config/shared/LoggingState.pb.tmp
        • Size 40B
        • SHA256 a9e38373c866bf4141f1d16ed4882a9b1c8de69f890914e14e1abefb223d08c0
        • MD5 SHA1 SHA512
        Submit Download

        media.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/media/shared/media.pb.tmp
        • Size 2B
        • SHA256 ffd2b38b328fe2e10d03587fb8dad5dd902305255aa5d7ec9e6a56ea6c0bdc62
        • MD5 SHA1 SHA512
        Submit Download

        media.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/media/shared/media.pb.tmp
        • Size 26B
        • SHA256 5cd15e6756683625a7ba2aeec2a711838837e7fcf24c7cef858f10c144dbf595
        • MD5 SHA1 SHA512
        Submit Download

        delayed_event.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/net/shared/delayed_event.pb.tmp
        • Size 2B
        • SHA256 f8bf02b74055ba2b2386a34bca9a3c1e96435781363d7fd461fdb98d201b005f
        • MD5 SHA1 SHA512
        Submit Download

        notification.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/notification/shared/notification.pb.tmp
        • Size 4B
        • SHA256 402f869978c5ef4ce822369a3fb53d1772080ada0af0724c4119e35257aa2683
        • MD5 SHA1 SHA512
        Submit Download

        .settings
        • Path /data/data/app.revanced.android.youtube/files/offline/.settings
        • Size 37KB
        • SHA256 4c27fab62e531dde67d32ddc041f4280bfcd273f7bffb381ebd9bbbafd394d4f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        playability_settings.pb.tmp
        • Path /data/data/app.revanced.android.youtube/files/player/shared/playability_settings.pb.tmp
        • Size 2B
        • SHA256 fb8da7eb5b1b399e7321179dac9e9f65773d7331e1e30554e3911e4325e1ef19
        • MD5 SHA1 SHA512
        Submit Download

        bootstrap.data
        • Path /data/data/app.revanced.android.youtube/files/procs/app.revanced.android.youtube/cfg/bootstrap.data
        • Size 952B
        • SHA256 88f486e59f7ba9d8501be1ddfeb861211c173a8bbed208002a717573dba05a2c
        • MD5 SHA1 SHA512
        Submit Download

        bootstrap.data
        • Path /data/data/app.revanced.android.youtube/files/procs/app.revanced.android.youtube/cfg/bootstrap.data
        • Size 952B
        • SHA256 dd9502e6d64512d32297fc1558d47f23b104abd093c4f602934ccd8545a3822c
        • MD5 SHA1 SHA512
        Submit Download

        bootstrap.data
        • Path /data/data/app.revanced.android.youtube/files/procs/app.revanced.android.youtube/cfg/bootstrap.data
        • Size 952B
        • SHA256 970438dcb1942b8c27e92c78a0b74ca3542b84164d5797019c3eb5c8119d8e2f
        • MD5 SHA1 SHA512
        Submit Download

        103243289
        • Path /data/data/app.revanced.android.youtube/files/tiktok/103243289
        • Size 4B
        • SHA256 6da90d10f2fcf94f10cc72beaebeec9c60f544fc888c7bb2413ba71794eb35f5
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb
        • Size 112KB
        • SHA256 2ad1a8deca3e8904e6e24e9dcb16707dec5dbbaa31aee96ae753fe16c2aa6309
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 39eddcb1ead75d0a35d23b6fd6b93e236afd2176a0e709d4e135e281f510e1e9
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 bf4f2ad4d61929ceaefc9d307626122474a1a3ddbcb54c937b05910ebd3a8e46
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-wal
        • Size 438KB
        • SHA256 449a7a2898af4960d1c7e3a0a67a6fea95ff4603cfab4376f85c96da7dc0fb93
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        1727730429792.jar
        • Path /data/user/0/app.revanced.android.youtube/cache/1727730429792.jar
        • Size 23KB
        • SHA256 f7a50626d32df2847d59644e44a78de85f1eb78dbfa9e20521ef4623929c775c
        • MD5 SHA1 SHA512 SSDEEP
        Download