Overview

overview

8

Static

static

6

revanced-m....0.apk

android-15-x64

8

Resubmissions

06/05/2026, 06:46

260506-hjtz2sfy6m8

06/05/2026, 06:39

260506-he3rdsbx318

06/05/2026, 06:35

260506-hcrlcafx8k8

Analysis

  • user interaction
    yes
  • max time kernel
    46s
  • max time network
    154s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    06/05/2026, 06:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    revanced-manager-2.6.0.apk
  • Size 44.7MB
  • Sample260506-he3rdsbx31
  • SHA256 cba4c461553ea74eb25a7b2e1842419c7f4f40adc619b10d518c114204b7e846
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Acquires the wake lock 1 IoCs
  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    defense_evasion
  • Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
    defense_evasion
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • app.revanced.manager.flutter
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Checks the application is allowed to request package installs through the package installer
    • Requests allowing to install additional applications from unknown sources.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    PID:3349

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        downloader.vdex
        • Path /data/data/app.revanced.manager.flutter/app_downloaders/0/oat/x86_64/downloader.vdex
        • Size 205KB
        • SHA256 ca7bf92db7565ef90f2caaa219eb5b3b28d27c62839a377731862134361bb22d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        patches.vdex
        • Path /data/data/app.revanced.manager.flutter/app_patch_bundles/0/oat/x86_64/patches.vdex
        • Size 46KB
        • SHA256 fb33584d070c3d4570731e2b74c283bc6cb1ed2d744c0aa4e5882f15398d717a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        15834cc1fc66481023a2266ece731352.0.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/15834cc1fc66481023a2266ece731352.0.tmp
        • Size 7KB
        • SHA256 7667f4f73577d20bc52119941c9fa2bd8ae2a99b15eaffd7f16bd8e5c7b46c37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        15834cc1fc66481023a2266ece731352.1.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/15834cc1fc66481023a2266ece731352.1.tmp
        • Size 7.6MB
        • SHA256 82a4354275caf7f37cd4b0cf0f98ee320646be18e921931d92b80a2aabd34191
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        781d17a2d3dbebed4ac4da4e33059cb5.0.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/781d17a2d3dbebed4ac4da4e33059cb5.0.tmp
        • Size 4KB
        • SHA256 d214b2290e3602a3b367826a8154d5ccef93131895cfa6d9c7a540a922d3ea74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        781d17a2d3dbebed4ac4da4e33059cb5.1.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/781d17a2d3dbebed4ac4da4e33059cb5.1.tmp
        • Size 1KB
        • SHA256 1afccfa3de1a1fcbc323bad59556914a484a0bcd2a7a5d4d4e54e563cd45d6f2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        795ee7bacb7027db9107e6caee025db8.0.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/795ee7bacb7027db9107e6caee025db8.0.tmp
        • Size 4KB
        • SHA256 e2dd26adf6b09dac601f1a44cdec2cc2e88f433152067f433fff8fbb1e999e33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        795ee7bacb7027db9107e6caee025db8.1.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/795ee7bacb7027db9107e6caee025db8.1.tmp
        • Size 1KB
        • SHA256 d07c4f2c900b23afa6013dcb0dbc9291082ad794ffe452fe9044b7846d9fbde1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        7af1ca25fe4f5f020381daf4efe1211e.0.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/7af1ca25fe4f5f020381daf4efe1211e.0.tmp
        • Size 4KB
        • SHA256 c320dae2d9206051d723e8c70733135576203efcf472e152c1369e344adbedce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7af1ca25fe4f5f020381daf4efe1211e.1.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/7af1ca25fe4f5f020381daf4efe1211e.1.tmp
        • Size 5.4MB
        • SHA256 f49a3a81670dd07677fd39f635cc1a687ffc2fa7e062dbe75bec0c0b60bf7226
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bb556c7e3e9d2b858ae8860a211d9a3a.0.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/bb556c7e3e9d2b858ae8860a211d9a3a.0.tmp
        • Size 4KB
        • SHA256 efcae7906142c79e89c84112865c40d9c39d714f7af530f28c704ca4805ea7ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bb556c7e3e9d2b858ae8860a211d9a3a.1.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/bb556c7e3e9d2b858ae8860a211d9a3a.1.tmp
        • Size 338B
        • SHA256 745561764554722b13ba3a2f1c83df8c7e28ffd3e7eeedc76a7f6686e01ddc90
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dbabe934abfcc2f0e1deee31d07cb962.0.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/dbabe934abfcc2f0e1deee31d07cb962.0.tmp
        • Size 4KB
        • SHA256 918d9686aad0ae9fe6fcf7daa441cb766b07c24a864db0f27fc0a209225e96d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dbabe934abfcc2f0e1deee31d07cb962.1.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/dbabe934abfcc2f0e1deee31d07cb962.1.tmp
        • Size 8KB
        • SHA256 49b43d964182a30b7b814e6738e4023d956dba733390c82bbd4a844d39cd5cae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        journal
        • Path /data/data/app.revanced.manager.flutter/cache/cache/journal
        • Size 569B
        • SHA256 cb81648e607eef29c4ce711318f4b42294b5affc562b0e25c82b4a9e0c6375dc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        journal.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        base.3349.tmp
        • Path /data/data/app.revanced.manager.flutter/cache/oat_primary/x86_64/base.3349.tmp
        • Size 1.5MB
        • SHA256 1a6f88ab079f142fa12a286b7393b739c0c84a01ea75bd2c42f0927bc9994444
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        manager
        • Path /data/data/app.revanced.manager.flutter/databases/manager
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        manager-journal
        • Path /data/data/app.revanced.manager.flutter/databases/manager-journal
        • Size 512B
        • SHA256 a4c7e67a1a4fb979aefaa9d1fe7044575a17aa21c18e16a7265766c6a836eaa4
        • MD5 SHA1 SHA512
        Submit Download

        manager-shm
        • Path /data/data/app.revanced.manager.flutter/databases/manager-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        manager-wal
        • Path /data/data/app.revanced.manager.flutter/databases/manager-wal
        • Size 132KB
        • SHA256 d3d21f4010957b7bf2019004325d2d86c6081c3fab5865dd8162fb0c0e675dc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settings.preferences_pb.tmp
        • Path /data/data/app.revanced.manager.flutter/files/datastore/settings.preferences_pb.tmp
        • Size 28B
        • SHA256 c96a9b0bb2443338ed60037ed9d30c4656082982f80ec4ec49e518891a0fd0dd
        • MD5 SHA1 SHA512
        Submit Download

        settings.preferences_pb.tmp
        • Path /data/data/app.revanced.manager.flutter/files/datastore/settings.preferences_pb.tmp
        • Size 56B
        • SHA256 ab8a3df40be20ed57dcf5245c81996de577c87098f9373b46ae622619089cb34
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/app.revanced.manager.flutter/files/profileInstalled
        • Size 24B
        • SHA256 221e7d2cca72faa82412a4941d21524fb65a62966a4a8f0d7d8b6c0962267a42
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/app.revanced.manager.flutter/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 049a91eadb325b66d9b0a08c9cdca9bd7602a9444f8572f253324aa40e812616
        • MD5 SHA1 SHA512
        Submit Download

        ackpine.sessiondb-journal
        • Path /data/data/app.revanced.manager.flutter/no_backup/ackpine.sessiondb-journal
        • Size 512B
        • SHA256 e9297825c3c0691a9dcf35fbcb57a2f43602afc5218c5c7d581c7124e4482cbd
        • MD5 SHA1 SHA512
        Submit Download

        ackpine.sessiondb-wal
        • Path /data/data/app.revanced.manager.flutter/no_backup/ackpine.sessiondb-wal
        • Size 16KB
        • SHA256 67a2a458366c6ff9d5444ef8187652079625ab20b4d7cc74f7619f0f3ffa3f51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ackpine.sessiondb-wal
        • Path /data/data/app.revanced.manager.flutter/no_backup/ackpine.sessiondb-wal
        • Size 213KB
        • SHA256 9ee37ed2914e71feee90eccf550e37c6391fe126f6d665eeedfdb4a9c6001809
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.revanced.manager.flutter/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 91acf03bf784874d3c8387e5276510c7418965d7172c9f4ed72ff82da507b2ab
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.revanced.manager.flutter/no_backup/androidx.work.workdb-wal
        • Size 197KB
        • SHA256 af4c111f08b8f0e67d80dc5a8612d525637688b04a29f2ecd6200ce3addfb058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/app.revanced.manager.flutter/primary.prof
        • Size 16KB
        • SHA256 b9e943e244b658d66742d84197dc9b824c96837d7931c0b948af6763dfb74ceb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.FhKXIR.tmp
        • Path /data/misc/profiles/cur/0/app.revanced.manager.flutter/primary.prof.FhKXIR.tmp
        • Size 32KB
        • SHA256 790059e606549d34cade27036f19337b5f6eb1430f373084697e21b93b981f8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download