General
- Target com.google.android.youtube_20.40.45_revanced_patch.apk
- Size 172.9MB
- Sample260820-vdm1rs1eqd
- SHA256 db2f4ef8968dbb4428a736ed489d662874b3f33c3f607a03e44413c3929366e5
- MD5 b728c89408a9bd211b96f963f82d5278
- SHA1 573ec37504cf1c889f5003a3803a5cc2a4cdd1d3
- SHA512 aef1c2485c7b92d3cf633b3d1f5079a2abd7b114c6f189a108082c0cc4df11fc480376f6161f8b0f3d756947fb98efd3a92a9d4fed5a875dfc28fc8c08055ff5
- SSDEEP 3145728:49U+9oxXB/p+7lplzO35wtcKok/NzhebBAsvquaY6qeffAlPqBzyMpnAJK3ypmnn:4+PXB/p+7lbzOGdLeJnaY6p4StnAoypS
- TLSH T186881255D368ED25C8F29736927C263A24692C30DF83D3DA581937BE2CF79F04A04AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
com.google.android.youtube_20.40.45_revanced_patch.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.google.android.youtube_20.40.45_revanced_patch.apk
Resource
android-33-x64-arm64-20260708-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.google.android.youtube_20.40.45_revanced_patch.apk
Resource
android-34-x64-arm64-20260325.1-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
com.google.android.youtube_20.40.45_revanced_patch.apk
Resource
android-35-x64-arm64-20260325-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target com.google.android.youtube_20.40.45_revanced_patch.apk
- Size 172.9MB
- SHA256 db2f4ef8968dbb4428a736ed489d662874b3f33c3f607a03e44413c3929366e5
- MD5 b728c89408a9bd211b96f963f82d5278
- SHA1 573ec37504cf1c889f5003a3803a5cc2a4cdd1d3
- SHA512 aef1c2485c7b92d3cf633b3d1f5079a2abd7b114c6f189a108082c0cc4df11fc480376f6161f8b0f3d756947fb98efd3a92a9d4fed5a875dfc28fc8c08055ff5
- SSDEEP 3145728:49U+9oxXB/p+7lplzO35wtcKok/NzhebBAsvquaY6qeffAlPqBzyMpnAJK3ypmnn:4+PXB/p+7lbzOGdLeJnaY6p4StnAoypS
- TLSH T186881255D368ED25C8F29736927C263A24692C30DF83D3DA581937BE2CF79F04A04AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Tasks
static1
Score
6/10
behavioral1
defense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral2
defense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral3
defense_evasiondiscoveryevasionexecutionimpactpersistence
Score
8/10
behavioral4
defense_evasiondiscoveryexecutionimpactpersistence
Score
8/10