Analysis

  • max time kernel
    46s
  • max time network
    160s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    28/08/2026, 16:21

General

  • Target
    revenge-manager-1.3.0.apk
  • Size 16.2MB
  • Sample260828-tt29yscj21
  • SHA256 816072f32b15da381f213f99a3d6f7127f5dd47ac2475955218d8a804fa5ff02
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • app.revenge.manager
    1⤵
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4417

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.0.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.0.tmp
        • Size 949B
        • SHA256 df1662e6611e10f8cc6c63d61d9f5de8873f1bdb154ac1daf30ab7d604a26202
        • MD5 SHA1 SHA512 TLSH

        13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.1.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.1.tmp
        • Size 26KB
        • SHA256 4488825aa7217e33f591856a50333c041ce4a289a94d2826f7532fe06062af8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.0.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.0.tmp
        • Size 947B
        • SHA256 18ab0ac8c121bd5a2969c1d415f759547f942d130c98ee163a83610c69ff078d
        • MD5 SHA1 SHA512 TLSH

        33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.1.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.1.tmp
        • Size 11KB
        • SHA256 275f5bdfa3a7f97dd0931afe2c96a13da54f605473c513fdf66a771624e7f87d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/app.revenge.manager/cache/image_cache/journal
        • Size 405B
        • SHA256 9722caf41c4fe5ab58d023651b8e0677bec6479868782e5be5ffb9bd437bf033
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        base.4417.tmp

        • Path /data/data/app.revenge.manager/cache/oat_primary/x86_64/base.4417.tmp
        • Size 696KB
        • SHA256 efc679f4108b281e33f4af534c0983fe94b35025e5e9102eccbd8615b2a14528
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/app.revenge.manager/files/profileInstalled
        • Size 24B
        • SHA256 d5b7a68e3e964bc6961646f12bd39c1afb001e3e4894d680f0151904cfc52b22
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/app.revenge.manager/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 14a6ed57d2c75689defa27d2d1e3439a98cb6948c83b21d2e7e5c2a111a20b9c
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 18168a1421f76280992e4a5c5d7e285d5d559f4d4ec5dec21aedb5e4c321ed8c
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 19cc29930a1057dc889fd254b396c4066f5a0fa27c2a0d40472fc7b0a5a660db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 3605e2a9aa810226cfa24bc3999ab98490a7bcdc448280ed968f2d94a72a3267
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
        • Size 205KB
        • SHA256 450883627645f57ba115acf34df854deb7d2942c6cc58e62dd6fc44652451420
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof
        • Size 6KB
        • SHA256 a393bedd8908b1559b6f6ced18d281531a20252c8aa2ed48dfb351e7411beba0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.5U7u7D.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.5U7u7D.tmp
        • Size 10KB
        • SHA256 34409f56790003862496bc86a8b584d356946c521769bdd8833242310185bc78
        • MD5 SHA1 SHA512 SSDEEP TLSH