Analysis

  • max time kernel
    7s
  • max time network
    35s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    04/08/2026, 17:14

General

  • Target
    microG Morphe v6.1.4.apk
  • Size 12.8MB
  • Sample260804-vsfj8seb66
  • SHA256 907b0f1d64d4bdf2fc15df596129cdf9f140f5360f557d24ff2e987c9f586f15
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • app.revanced.android.gms
    1⤵
    • Loads dropped Dex/Jar
    PID:4753

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        primary.prof

        • Path /data/misc/profiles/cur/0/app.revanced.android.gms/primary.prof
        • Size 6KB
        • SHA256 556fd945357392eabd629f7780f3f1bdb95e1fa7fe446fc32d6760d4ff9e2eaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gcmstatus

        • Path /data/user/0/app.revanced.android.gms/databases/gcmstatus
        • Size 28KB
        • SHA256 0a64ced8bf9df50faa329f9cee1007983f2bb7848d1b8ae1f735acc91c19a2a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gcmstatus-journal

        • Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-journal
        • Size 512B
        • SHA256 b8f6843f07db5a36f5421356103560b36ced62f3c74f5bd56a4f39d94fb3d50c
        • MD5 SHA1 SHA512

        gcmstatus-shm

        • Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        gcmstatus-wal

        • Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-wal
        • Size 16KB
        • SHA256 366ee1138c4709681db4a44a55412ad2f7119ff0ce7e40db6b080ddb57325c7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gcmstatus-wal

        • Path /data/user/0/app.revanced.android.gms/databases/gcmstatus-wal
        • Size 40KB
        • SHA256 e9755c2956e4f9f837c929a78ccb95cb1d17080f3bd190b5ed9897ed15394349
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/user/0/app.revanced.android.gms/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ae1a59d51821c5b60a12b31f1978ad069b49f14b2edb60223fff1e9f64d840d1
        • MD5 SHA1 SHA512

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH