Analysis
- max time kernel
7s - max time network
35s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
04/08/2026, 17:14
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
microG Morphe v6.1.4.apk
Resource
android-x64-arm64-20260325-en
1 signatures
30 seconds
General
- Target microG Morphe v6.1.4.apk
- Size 12.8MB
- Sample260804-vsfj8seb66
- SHA256 907b0f1d64d4bdf2fc15df596129cdf9f140f5360f557d24ff2e987c9f586f15
- MD5 0a524eb52eef0c04fba151fdddd21240
- SHA1 ceac407b29cf9b5d20bd2fad06c884fc4ab1e39d
- SHA512 4b12b798062942b4ffdc30827060e32ee51d4ec3180b6d13b03836f87c6df91c69014947aae116b19dd67be0aab98f556975ac371b7b73b1cfd51b36f8f11799
- SSDEEP 196608:tdwA290RxfXBGqfheJHGswI8ob2hnYl0RmS6BzmDZXmyFejE8goGSIxd:/2KRxUIIYIenYlyF6BqDzFe3GSIb
- TLSH T1B6D601ABB35C5A2FC47710728D6A7231D25E8E268F4287876948331D38B76E40F7A7D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4753 app.revanced.android.gms /system_ext/framework/androidx.window.sidecar.jar 4753 app.revanced.android.gms
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/misc/profiles/cur/0/app.revanced.android.gms/primary.prof
- Size 6KB
- SHA256 556fd945357392eabd629f7780f3f1bdb95e1fa7fe446fc32d6760d4ff9e2eaf
- MD5 e3d650a9d6b0f9eafff620779c9bca1d
- SHA1 d349d4bf0ae7d4a85add485bc24e1372f44d04f5
- SHA512 1f5cc5f78b928f850f07d35db8658c166697d394f9f4e4e1a0dd1061d7bc6562a6fff8cbc460cece497089b44db6eda6cfdeeca386200ac83d7a938beb8661f5
- SSDEEP 192:EVn2lBZvTGsg3rbcXvrgluzNHG32cDRWSp:k2lvGrUvr3zNHGlDMSp
- TLSH T174E1B16545FD3CA84A797B747C2C3C46ED560498B5C6DB3698B83606D8CCB64CF47409
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/app.revanced.android.gms/databases/gcmstatus
- Size 28KB
- SHA256 0a64ced8bf9df50faa329f9cee1007983f2bb7848d1b8ae1f735acc91c19a2a5
- MD5 175d13c72a463cfdf35e432b45b829f1
- SHA1 e0b62c0ef0c10dbbd3d6923d1e87ec4e16c72287
- SHA512 ebc15a207adcfa5bf7eac861578e51bbc4f02829cfd79f7992a1c82b7ca413b021ca63a4e543308acb15e1dd51de360fd255071315019a5f0f1be2deb876e2bb
- SSDEEP 24:T8+RQVbJQYIfgwTPi0F5Aj7fIJlg/EGSiI:TVWVbJnbwTP8fIgTS
- TLSH T1F9D26DCA8F20CB13D547053B6D5463200F39E76A65632783ABF961B16D83456D932CFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-journal
- Size 512B
- SHA256 b8f6843f07db5a36f5421356103560b36ced62f3c74f5bd56a4f39d94fb3d50c
- MD5 690b436cb30e2a1ecfab69f331a2f998
- SHA1 6ccfb67ab0024cc065c46b3835af0292c3387bc8
- SHA512 c08dc7b61526625e502ee57e901b399a2fd50b8d6950fdb071b05d07b80f86ee3e62bcf4cdca56af350ab8f43ef2c8e75eccfb36a8ad29a59c927246a6165b19
- MD5 SHA1 SHA512
- Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-wal
- Size 16KB
- SHA256 366ee1138c4709681db4a44a55412ad2f7119ff0ce7e40db6b080ddb57325c7a
- MD5 2000f4cfb9fffb965bb21b803270f4bc
- SHA1 a4fd96a1118174f6f7bd216924832f08d2d38324
- SHA512 a5599ad6fb7c3b21c9f292f3a4dc756b16e40402fea7fbc5569867df6ea1ee60718c9589eb70a052cf7d4989b4b6d7fb73ae26b43b4a11d8227166009baea5c8
- SSDEEP 6:KqLUnUp9FZde/kPlOERX4PBX4ogLugMBX4suuK+/yUg+FFg9l+FwkOw2:K2zdeWRmBEyPbP/ykOw2
- TLSH T191728C549B4119E6C507027694EDC3012DA0E62D13FAC70B73919B21EC032CCA890D38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-wal
- Size 40KB
- SHA256 e9755c2956e4f9f837c929a78ccb95cb1d17080f3bd190b5ed9897ed15394349
- MD5 ea070aaa995bebc5b09329c1aff107e0
- SHA1 0d5ccd5fe561af853c30de4f365711003ffcae55
- SHA512 a8ef24ff6784212622583cf800a1a3b993a4f4bd40e71875a4d48a4896c8ab8f7b419b0d0afb97ddb64d68ecb29fbc32c6339488b4e1784972812705e974e024
- SSDEEP 24:88+RQVbJQYIfgwTPi0F5Aj7fIJlg/EGSP/:8VWVbJnbwTP8fIgTSP/
- TLSH T105035CCA8F2087D3C003057B9DA923101E79D75D66E627837BE9A6B1AD43401D532CBE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/app.revanced.android.gms/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 ae1a59d51821c5b60a12b31f1978ad069b49f14b2edb60223fff1e9f64d840d1
- MD5 75c49f60507eadf9be11df585b550981
- SHA1 cd38e51bb362793974f94fc43ebbb558315f517e
- SHA512 3a752d3633cd308f64e2a9c1ed06784ddcb7a37e35a8665943fd6e137c73ca0b2a4efcfdb4935ca04c8d7a7b93a8f9e928900289a4b337be0c2e1f28f98015f0
- MD5 SHA1 SHA512
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH