Overview

overview

8

Static

static

6

YouTube-v2....0.apk

android-13-x64

8

Analysis

  • max time kernel
    95s
  • max time network
    304s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    08/08/2026, 13:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    YouTube-v21.04.223-patches-v1.39.0.apk
  • Size 92.1MB
  • Sample260808-q91vaasscx
  • SHA256 0dc415de00c3cfbe4f6aa92c8a9882f1fc7e6cf339d33ddad7b42cc0396173d9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • app.morphe.android.youtube
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4205

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1762298034389.jar
        • Path /data/data/app.morphe.android.youtube/cache/1762298034389.jar
        • Size 10KB
        • SHA256 8d4cd614e000d6431d6d607fcf96f65a041e53aaeef41891d584a4554fd356b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1762298034389.jar.cur.prof
        • Path /data/data/app.morphe.android.youtube/cache/oat/1762298034389.jar.cur.prof
        • Size 212B
        • SHA256 f47d08e632aa2f842a39e181368b9da67b5112649e043ca1f1ac64a8062c1b97
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore
        • Size 20KB
        • SHA256 6f35049e719fd1c511e47daf406842680ed8a3facb609630ddb8fa6905fa9ec2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 512B
        • SHA256 783f2d3a3356da341f2db7e5aba31efd25749784ee7dc49eb47c6ffa5f0be53c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 8KB
        • SHA256 60116384171bb7cf900854e6fa62d5d2a3669af256b20b8d787fedf2e10eb8c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 8KB
        • SHA256 3fe73f0951cc2ec87f797259c18eaee245cc546e0c2e0f9d91b6ef13521f2a6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 12KB
        • SHA256 caf01d66a7d43e74423bbf5bbc122d845a2a9b8aae84ad27116444b3afafc175
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 12KB
        • SHA256 1b009d99703cba70fab8de401eaa2a0750f1f0f866e9f5343a0f7bd922ccdc3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Path /data/data/app.morphe.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal
        • Size 12KB
        • SHA256 85f5fe45d86915542b70b1f999b993a66d1d19295604c9e5cd4a9baff2e51b56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.entitystore
        • Path /data/data/app.morphe.android.youtube/databases/default.entitystore
        • Size 28KB
        • SHA256 96a22f6cae04f602424cd8722eae6ea74fed05b91014a9558752edaef20295a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.entitystore
        • Path /data/data/app.morphe.android.youtube/databases/default.entitystore
        • Size 60KB
        • SHA256 fbca2eaf7283a9065a219bfa4f103b7b6946baf1a5784612f3b09397ed65a06d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.entitystore-journal
        • Path /data/data/app.morphe.android.youtube/databases/default.entitystore-journal
        • Size 512B
        • SHA256 81e873181a0849ce585858a101a332c58e9ac20445236ffba6514dbfa8cc6e2f
        • MD5 SHA1 SHA512
        Submit Download

        default.entitystore-wal
        • Path /data/data/app.morphe.android.youtube/databases/default.entitystore-wal
        • Size 16KB
        • SHA256 ceec73716828d4a8579c52951f23e50d7058ebb9309173d65940939e32d2eed1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.entitystore-wal
        • Path /data/data/app.morphe.android.youtube/databases/default.entitystore-wal
        • Size 40KB
        • SHA256 1fb2eed37569e1cbaed6f2e741a9e2dc16c5a27d663e6f51c336a10d92750c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.entitystore-wal
        • Path /data/data/app.morphe.android.youtube/databases/default.entitystore-wal
        • Size 48KB
        • SHA256 0665580fd6a06892782204d7622f3c99fd328ccdd823958cfa9a1b6c1a777df5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity.db
        • Path /data/data/app.morphe.android.youtube/databases/identity.db
        • Size 28KB
        • SHA256 984b12e878926695385d1e997a92f8eed548de42a8a2fa298665b73d649db413
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity.db-journal
        • Path /data/data/app.morphe.android.youtube/databases/identity.db-journal
        • Size 8KB
        • SHA256 b3d2b26dcbe6ab873932d3aef85d78f524a3cf43f7614bdaff3cb9797aa1b1b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity.db-journal
        • Path /data/data/app.morphe.android.youtube/databases/identity.db-journal
        • Size 8KB
        • SHA256 42ce31cd6c4dc04ce368c8d883cdeb9bae869312854fc7a9caea3c8f7654dbd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity.db-journal
        • Path /data/data/app.morphe.android.youtube/databases/identity.db-journal
        • Size 512B
        • SHA256 28f6601950620ccd13a91b2613965a6fcd56c42ea4949af28046c3ca6bb084b4
        • MD5 SHA1 SHA512
        Submit Download

        youtube_upload_service
        • Path /data/data/app.morphe.android.youtube/databases/youtube_upload_service
        • Size 20KB
        • SHA256 468b0dd610fb45daf174070b88d9159bcb3237a5b79c79ee2585f671e2c91005
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        youtube_upload_service-journal
        • Path /data/data/app.morphe.android.youtube/databases/youtube_upload_service-journal
        • Size 512B
        • SHA256 be809812c2d04124dc93bb8258e1d0b8902827fe7f2a460d0f4cd457644bbff1
        • MD5 SHA1 SHA512
        Submit Download

        youtube_upload_service-journal
        • Path /data/data/app.morphe.android.youtube/databases/youtube_upload_service-journal
        • Size 8KB
        • SHA256 5fde4e5f122a19e6efe72b3b3d5fc989e075f884de1d68ff9fd2a9ebde446d8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        youtube_upload_service-journal
        • Path /data/data/app.morphe.android.youtube/databases/youtube_upload_service-journal
        • Size 8KB
        • SHA256 d7fef9c815b33743901b00054f5bdd626160a291b9d79113f4df989989b1329d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        103795117_app_morphe_android_youtube
        • Path /data/data/app.morphe.android.youtube/files/103795117_app_morphe_android_youtube
        • Size 10B
        • SHA256 ed5dc253640c7efc6939eab09cc2d09086729ea8487adc4de012423f0db7f1d0
        • MD5 SHA1 SHA512
        Submit Download

        103795117_app_morphe_android_youtube
        • Path /data/data/app.morphe.android.youtube/files/103795117_app_morphe_android_youtube
        • Size 8B
        • SHA256 98e3d73dc89011d045248bf54c1736d9bab75ed9394a42c09ded96ed005b843b
        • MD5 SHA1 SHA512
        Submit Download

        AccountData.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/AccountData.pb.tmp
        • Size 99B
        • SHA256 3d35849024520f6d966a73d9dc5defbd6528149bbef7d3579eef5d67e351f253
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AccountData.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/AccountData.pb.tmp
        • Size 99B
        • SHA256 55ea3eb3c8d84d3be1599c9514f47ba2d1e9b29d97d2337fb7240b1d96322ec3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AccountSyncData.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/AccountSyncData.pb.tmp
        • Size 13B
        • SHA256 b465cf19d73fdce31ce91c57acd2764589b270dc773b220d68e1125ded896d93
        • MD5 SHA1 SHA512
        Submit Download

        AccountSyncData.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/AccountSyncData.pb.tmp
        • Size 13B
        • SHA256 d4f91c65f8f2a3502ffed738efebf110e0abb0395275582d5f984ae1d45d2f5d
        • MD5 SHA1 SHA512
        Submit Download

        YTAccountDynamicConfigStore.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/accounts/1/YTAccountDynamicConfigStore.pb.tmp
        • Size 240B
        • SHA256 61a6a9f70dc269a140eab5c8c1aac88d667f84e5318452f6e4782d864791a9c0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        YTAccountStaticConfigStore.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/accounts/1/YTAccountStaticConfigStore.pb.tmp
        • Size 419B
        • SHA256 15b01087bf558b31042436d156276ddeb04513296aea9ce340b31a0f50d17a14
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        YTLibraryResponseStore.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/accounts/1/YTLibraryResponseStore.pb.tmp
        • Size 1KB
        • SHA256 b43dd3b0061d2d42a97b9ed3b829e1fe2c3b2e0198bb84b1e0a99253c73a0551
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        bootstrap.data
        • Path /data/data/app.morphe.android.youtube/files/cfg/bootstrap.data
        • Size 4KB
        • SHA256 19b791b36edf3195cb1f60cf87ad7bf71ef72b6200210b36f9d162590fe5973f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        bootstrap.data
        • Path /data/data/app.morphe.android.youtube/files/cfg/bootstrap.data
        • Size 4KB
        • SHA256 39e142f112a9f3fc6c18eb129eb285b0dbdc145c7f680a6d596dc33a91d4c46b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        theme_proto.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/commonui/shared/theme_proto.pb.tmp
        • Size 19B
        • SHA256 d7b330b8ae0e09f8c190dec7ab256ca4716f635705307f93f79f6d09c8bea1ef
        • MD5 SHA1 SHA512
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 34B
        • SHA256 b96b661cb876335b9b950218574e56acd40046b3a261b32a60a0cb5157e06912
        • MD5 SHA1 SHA512
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 75B
        • SHA256 9163e98335b75a83eeb37ef5d6092830a922a0aede6dd4c7839f6ac0fa0f2262
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 118B
        • SHA256 c9adec496d1be6fd9754dadf06943fe5d9f0769d8d4ab514a2596cedf0d8fda5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TaskPeriods.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp
        • Size 157B
        • SHA256 0ee3fa24ccbd81301045258e0f861c2e5db07d5204695f65a8ce58fa61ac0ea0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LoggingState.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/mdd_pds_config/shared/LoggingState.pb.tmp
        • Size 26B
        • SHA256 388c4a7efdbb3f1a70229ca81739294bd9891a8ee65101f670872d49dba74bfe
        • MD5 SHA1 SHA512
        Submit Download

        LoggingState.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/mdd_pds_config/shared/LoggingState.pb.tmp
        • Size 39B
        • SHA256 5cc3cfe447df5df06c09e3dea462427adea95a42fdd2386bb31e8b9da958e4c0
        • MD5 SHA1 SHA512
        Submit Download

        media.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/media/shared/media.pb.tmp
        • Size 2B
        • SHA256 ffd2b38b328fe2e10d03587fb8dad5dd902305255aa5d7ec9e6a56ea6c0bdc62
        • MD5 SHA1 SHA512
        Submit Download

        media.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/media/shared/media.pb.tmp
        • Size 27B
        • SHA256 0c95dda7a8493fccac967455b376bfc56f300ad9fdadf920a9bfddcdfe789e71
        • MD5 SHA1 SHA512
        Submit Download

        delayed_event.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/net/shared/delayed_event.pb.tmp
        • Size 2B
        • SHA256 f8bf02b74055ba2b2386a34bca9a3c1e96435781363d7fd461fdb98d201b005f
        • MD5 SHA1 SHA512
        Submit Download

        notification.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/notification/shared/notification.pb.tmp
        • Size 4B
        • SHA256 402f869978c5ef4ce822369a3fb53d1772080ada0af0724c4119e35257aa2683
        • MD5 SHA1 SHA512
        Submit Download

        .offlineCloudSingleTabBrowse
        • Path /data/data/app.morphe.android.youtube/files/offline/.offlineCloudSingleTabBrowse
        • Size 1KB
        • SHA256 868d89bf9a0362720ce140a0255b0b595cb84dd896b5e3f60fe81865e11e24bb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .settings
        • Path /data/data/app.morphe.android.youtube/files/offline/.settings
        • Size 39KB
        • SHA256 92fdbe7af2b76291c3b47601e98460c6ca965393ab5b0bc0bdcb78f094b7d3a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        playability_settings.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/player/shared/playability_settings.pb.tmp
        • Size 2B
        • SHA256 fb8da7eb5b1b399e7321179dac9e9f65773d7331e1e30554e3911e4325e1ef19
        • MD5 SHA1 SHA512
        Submit Download

        system_health.pb.tmp
        • Path /data/data/app.morphe.android.youtube/files/systemhealth/shared/system_health.pb.tmp
        • Size 5B
        • SHA256 99b2b89008589162fef378724cb49a77c3eda04368c6f69f797c73e2577db76e
        • MD5 SHA1 SHA512
        Submit Download

        103243289
        • Path /data/data/app.morphe.android.youtube/files/tiktok/103243289
        • Size 4B
        • SHA256 fa84823efdad0611b159edcff1fb39fdb062d6325d95446409f9236ce7bcabae
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/app.morphe.android.youtube/no_backup/androidx.work.workdb
        • Size 104KB
        • SHA256 8b416a4a969d73cb87e14cb3222b3ae0c7de75b71da108dd6fad2caf1504305c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.morphe.android.youtube/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 913d3fe1aaa38c98e9f3795eac3ff439fffb5a12137c39a2614f33361e5308d1
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/app.morphe.android.youtube/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.morphe.android.youtube/no_backup/androidx.work.workdb-wal
        • Size 430KB
        • SHA256 7594700810aa77d6e7158e5061c2cafc3aa20d81bdc99272e24f865618aec778
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1762298034389.jar
        • Path /data/user/0/app.morphe.android.youtube/cache/1762298034389.jar
        • Size 23KB
        • SHA256 d01347b7cbce666dacdcc77b9a2772c7df6ce0716d080b50a0445749d2f18835
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download