Analysis
- max time kernel
46s - max time network
162s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
28/08/2026, 16:21
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
revenge-manager-1.3.0.apk
Resource
android-33-x64-arm64-20260708-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
revenge-manager-1.3.0.apk
Resource
android-34-x64-arm64-20260325.1-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
revenge-manager-1.3.0.apk
Resource
android-35-x64-arm64-20260325-en
5 signatures
900 seconds
General
- Target revenge-manager-1.3.0.apk
- Size 16.2MB
- Sample260828-tt29yscj21
- SHA256 816072f32b15da381f213f99a3d6f7127f5dd47ac2475955218d8a804fa5ff02
- MD5 fd5e983f0d80af5ed0cee8efc660ae36
- SHA1 7523182cbdc3dbcd9dcc2b3920ddc58a0d1a4487
- SHA512 05ce3729b0a036627246701c1edd285e5c3b13a4537b280e5b781f73a6e32afe2a4445a264f7476ba8302e6d10f15302482660c13f3299082c9c887a8ead24d1
- SSDEEP 393216:Oywo7jOKxytahfGQvMDBVx/1TE6vkvS6sj:OyvjffGQvMDBVic
- TLSH T18307CE46FA8A8975C8EEA13A566A4331B3313D08874397975604FB78BD732C08F7A7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4110 app.revenge.manager /system_ext/framework/androidx.window.extensions.jar 4110 app.revenge.manager /system_ext/framework/androidx.window.sidecar.jar 4110 app.revenge.manager /system_ext/framework/androidx.window.sidecar.jar 4110 app.revenge.manager - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule app.revenge.manager - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal app.revenge.manager
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.revenge.manager/cache/image_cache/13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.0.tmp
- Size 949B
- SHA256 e712c158a05a3fe0e48393d853cc01e470ad51159bc43f20e96ef46a335ca72e
- MD5 9dfc14224dfc8f955bbed7c950e14b85
- SHA1 b5dea1287078bf108a17539fb90fbc91a58eb033
- SHA512 f5150c8f726753f460449235e5736b108cb42a69f761965c6bc82362b4972b1da223911b2e634d80498bca82a2b87105b3e6ea4fbd2916adb5fdb81e0feef0f7
- TLSH T176110BF7622AA6E44B8183E1A6DC6B483325D310F8F3F0ECE010468882D32F986C7246
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.revenge.manager/cache/image_cache/13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.1.tmp
- Size 26KB
- SHA256 4488825aa7217e33f591856a50333c041ce4a289a94d2826f7532fe06062af8c
- MD5 8a3a6d0ff633c0908f728dfeb777a068
- SHA1 a5acfdf201460b5f5393ef47d68f5e550a3835c9
- SHA512 e224cd6aa936db0eb237776be4d9428ef2eff8173889c6b828e78cd1e0023f86dbaf1b705ef1c4c4ea7fdadb0516f7ad4dea95fb8bbe97ea70b58669df909b04
- SSDEEP 768:waoqeeysAkmkWKfXSfYdz3qCEHjoiXvX43:seystn7qpjh/o3
- TLSH T1D0C2E18A7970EA0D37356471117588B0276CB8B3622E2AD191DE38ED3E8DB37819F743
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revenge.manager/cache/image_cache/33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.0.tmp
- Size 947B
- SHA256 61e4cca2d4b51ef7345c6443dd4fb5dce22df29108df5a76da4a55347baeefc8
- MD5 dd6874f0b038c38b3af12c1adb76a512
- SHA1 a0bee5098d4b52fdc9c2eb5853b37a9ec00114ba
- SHA512 19652723316ea4064aa960d37d3366eb5c161ede1eab49f0857ef9a3d8e39b5eb40092947c40cb4b95d2d802cb5d16168dbdbcd4cee5be662fefbed092c05dee
- TLSH T18611EDE7A27990E44B90C3F1AAD8BB063251D215F9A7E0ECE110568841D33FC5AC7645
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.revenge.manager/cache/image_cache/33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.1.tmp
- Size 11KB
- SHA256 275f5bdfa3a7f97dd0931afe2c96a13da54f605473c513fdf66a771624e7f87d
- MD5 98ddf1e06903506723e913b3b39b17de
- SHA1 e9ca2307e46d484920a50e43833edeb10ff2c1ae
- SHA512 3bff7aeb4f33b3f0258c0342845a7f94b0cfac3d228207b01d34f10767aae22bfe2c6ea0c970420769999fd7e80797ce07615118f369cc90daf44ecde1b6cb0b
- SSDEEP 192:OxX/kin5GuTXTc/xBGs/+jjf2umOXaAfEZm5MQDAI5j9RHeJtm8uh0f3:iX/BnPT2x46sf2uhqAfEZlQx5jXe7m8R
- TLSH T1A0329D2F9E0AEB01779F8F8F1B321113D60825437A50AE333805CD67F6B8D381941B96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revenge.manager/cache/image_cache/journal
- Size 405B
- SHA256 4379618e2f94f00f9d9b80b2087df44f7179ef7417425b4961b43c15f9f5d004
- MD5 c6c16575990e0efa5d5eda7a254570f7
- SHA1 6ec7da7c127de0d287171fddaf0ebb2e58171455
- SHA512 fb08ba02b5a3bfbec63c5561b6487cd4adb175cae41aaeace189e1a54aa8979db5916603d90b3fa6623394d7ede0bb65a3211a4a7423620a77a55f6e61aae133
- TLSH T17FE02BDCA26C01E6D564AC34679EAC47941F462D4A21042AB00E1EBF8F0126D46D125E
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.revenge.manager/cache/image_cache/journal.tmp
- Size 31B
- SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
- MD5 d6ac8c8db0504502d7f0e057a78c5ce3
- SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
- SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb
- MD5 SHA1 SHA512
- Path /data/data/app.revenge.manager/files/profileInstalled
- Size 24B
- SHA256 334af761b014f0c40ba6739aa1d5cea10e2154163f19b0fa88a591b89909d91e
- MD5 18b7ef66a4aac177450b22e0dc66982e
- SHA1 c2b9adafe3b5abad3fceae804e24d67d75d88fdd
- SHA512 324b604c2850e6814719e7d6add19ee92704efab410e1daaa038b1ef2e7db9ee2ac45c0ffc7637e8fcbfed340b5e15619fa77fc641bc50a018891a5fcec9827c
- MD5 SHA1 SHA512
- Path /data/data/app.revenge.manager/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 dc644c496e0267516a9b5021474a6bba62d723205014176e037ad605f71ae769
- MD5 be0d5233a41a773f8a01989d6bb61dac
- SHA1 8e2438f267968238360c6041b65bd954d7e5ec2a
- SHA512 fb971a5047f135cdff0d7561bd6a0a81f0c336aa4fb195f595dbd2fc9b6182a6b69d022dc4c22eca90acd48ef14c73958a1493fbb934c997e992c129a221ff21
- MD5 SHA1 SHA512
- Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
- Size 257KB
- SHA256 71295d17cbba4f96a22c3fe50ad0089c7206988b5ca4c7c4b951bbd3ee0820aa
- MD5 ff689ed8859dd08531e5311c1e7d043d
- SHA1 9608bf6436a6f94874b1c4461e31f0a60834a2e1
- SHA512 c0eccb1605c361e0d26d0f3d625d18503952659a4cfe42ade1ebc95c4f029a1796ea15e4f8e18bed1a37906e6b20478ffeff0948cfc2c8e126fe1ab17dd1471c
- SSDEEP 24:OcodyAZ1sqtYpTsjdyAZ1sqtYVKGPm5o06:+dtZ1DtYpTadtZ1DtYVxmo06
- TLSH T18E44F1CFE600C142D27D3ABDBCCB45FC8A234CB942C24D9D2095E329B272106032AB64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof
- Size 6KB
- SHA256 a393bedd8908b1559b6f6ced18d281531a20252c8aa2ed48dfb351e7411beba0
- MD5 12b981f7e04e578843a903b64f97f2d5
- SHA1 ca6d3f5cadcaae3c8650da31bcab4a63f192157f
- SHA512 c32f6ae86e538e4d8f52c5568bf89ff77f04cf61d17671996faabf5de5d1658bf13e7d07b7119cc485b8aa46a4bbea2fb551b42ec6002253bdd8dde183c7016a
- SSDEEP 96:I4cvqB2qo+Ff9jthlFoegC6LmpKeFb+bwi8LA2CB+BpegXy/Xf5Gh5ebAEs:2vCHd9jTPoFLmpKeJKwi8LAhz/XcIxs
- TLSH T1DCD17D2AD1ECE644C445D334ABA792277C5EDE608D7443E050A99EA09F18DEB3628694
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof
- Size 10KB
- SHA256 0614170609fdee38255dcf8f6ad89a2fb202b2e4ece4959a031d01d80257e65f
- MD5 bee89d4766ca038bcbf74200f899e537
- SHA1 35f6e479d5a1559739a85b5a7f01c1572c1793c1
- SHA512 5a2289138bffad0d3485f7f3bdf6c43ecb5ef2970c68ef2b5ba9f99b36d1d941a24b3e8aa6252acffbe7699cade8f179572cc5fabf4543ed26e27a89899cd906
- SSDEEP 192:BW5QMEe4HBbgCt7ZHM9w7O1zSu20G48faZX/LNpRBs9n:CEeoBDhiw7FJaJLNp4n
- TLSH T1DB32A0FCE9B17A80F12B1E3C3ABAC72941F8374F678506DA1C24C7F144792644287E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- TLSH T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- TLSH T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
- MD5 SHA1 SHA512 SSDEEP TLSH