Analysis

  • user interaction
    yes
  • max time kernel
    337s
  • max time network
    612s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    28/08/2026, 16:21

General

  • Target
    revenge-manager-1.3.0.apk
  • Size 16.2MB
  • Sample260828-tt29yscj21
  • SHA256 816072f32b15da381f213f99a3d6f7127f5dd47ac2475955218d8a804fa5ff02
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Declares services with permission to bind to the system 6 IoCs
  • Requests dangerous framework permissions 36 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • app.revenge.manager
    1⤵
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:3302

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.0.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.0.tmp
        • Size 949B
        • SHA256 d941caad50f6f44328099da66a5fbfdbaae3b5f6ad06e23f881c97064f786096
        • MD5 SHA1 SHA512 TLSH

        13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.1.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/13bc18e1077a62816dab2ed6eebd22b2c91a42a786eda622fddd95880a770dd5.1.tmp
        • Size 26KB
        • SHA256 4488825aa7217e33f591856a50333c041ce4a289a94d2826f7532fe06062af8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.0.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.0.tmp
        • Size 947B
        • SHA256 723e7247e2d968eb6e3dd68eb68c374dbabe88e5cfb900ecd94efbf334b74eb9
        • MD5 SHA1 SHA512 TLSH

        33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.1.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/33f297b2dfc1e0bdd5cda71ffb3234d17a36e2f6bb81b017cceb8cd7991142de.1.tmp
        • Size 11KB
        • SHA256 275f5bdfa3a7f97dd0931afe2c96a13da54f605473c513fdf66a771624e7f87d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/app.revenge.manager/cache/image_cache/journal
        • Size 405B
        • SHA256 9722caf41c4fe5ab58d023651b8e0677bec6479868782e5be5ffb9bd437bf033
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/app.revenge.manager/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        base.3302.tmp

        • Path /data/data/app.revenge.manager/cache/oat_primary/x86_64/base.3302.tmp
        • Size 704KB
        • SHA256 437d643993752700feea99b0cf63ee77565f3f39a4924e4cb807e48c82d556c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_1242778322309020834.data

        • Path /data/data/app.revenge.manager/cache/tempdir_1231839433149356601/temp_1242778322309020834.data
        • Size 10.0MB
        • SHA256 f49eb60432e10c67f1c5c840b1f115335c95cdd3008b336f57a3d044893c42d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_3269316738537196294.data

        • Path /data/data/app.revenge.manager/cache/tempdir_1231839433149356601/temp_3269316738537196294.data
        • Size 10.0MB
        • SHA256 d2048ac7c80f369fb7ea2c7e61c3750d22cf3875d9b3e48138a5929c6f21cdd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_4914682069709103551.data

        • Path /data/data/app.revenge.manager/cache/tempdir_1231839433149356601/temp_4914682069709103551.data
        • Size 10.0MB
        • SHA256 2fb91bd54591639903065f3190b63c4014a0dd15649f9fcf285387cd07017197
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_513423232410500624.data

        • Path /data/data/app.revenge.manager/cache/tempdir_1231839433149356601/temp_513423232410500624.data
        • Size 10.0MB
        • SHA256 b6fbab32acbf1988f0a5ca35e51d7a6fa27bb50c63b480260505d649b5a75af1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_585781794568335638.data

        • Path /data/data/app.revenge.manager/cache/tempdir_1231839433149356601/temp_585781794568335638.data
        • Size 10.0MB
        • SHA256 d66bd20edcdbb7df7b933a2c700f7d2a1dc227cdcee2c916810d89b01fa0d84d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_4493098924306300304.data

        • Path /data/data/app.revenge.manager/cache/tempdir_5407844659526327562/temp_4493098924306300304.data
        • Size 10.0MB
        • SHA256 3b5f5b52e8c6d68f4ffe3168461c86fc4cbd641e9715e5978e965b7aaab1f170
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_5488673255741584658.data

        • Path /data/data/app.revenge.manager/cache/tempdir_5407844659526327562/temp_5488673255741584658.data
        • Size 10.0MB
        • SHA256 8211be09d1f6656c527b480cc27efdaa0f58f8222ba2c7ba91113fc9f2d25165
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp_8347008790647380046.data

        • Path /data/data/app.revenge.manager/cache/tempdir_5407844659526327562/temp_8347008790647380046.data
        • Size 10.0MB
        • SHA256 bd734cda7aa4871c0f174918c63315404d635eef2e4b5df693f867d0b8043e9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ks.keystore

        • Path /data/data/app.revenge.manager/files/ks.keystore
        • Size 2KB
        • SHA256 d5437ce28ec699f7ba177eaffd88b29bc4ffcb28376ffc7e1b37f96d6493de24
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/app.revenge.manager/files/profileInstalled
        • Size 24B
        • SHA256 dbffad179ae127dd8b4639f6373896b3610f7123626be935e319f30454c7ed86
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 94f81059d8fde10eab65c23939a2a7d376cda858b5ded0d6696a13ad20c8fab7
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 20d06b8e5d51305f73a66b1802e71070f2ea7bc5417455ef918775b92674c159
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 15f5a50762f14cba1cb7d8affddf131af842b2ebbca9200c81cfb0aa1c65fe3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/app.revenge.manager/no_backup/androidx.work.workdb-wal
        • Size 229KB
        • SHA256 005ee54913de272fa03d9de4445c30a0d7617213acb54d133c9c747b8aba6f1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.7CSr6s.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.7CSr6s.tmp
        • Size 8KB
        • SHA256 eb8da78bdb092a93b3f022ece7a38ec96d7f8c7f122feb04fb017b92122b7363
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.CMYm76.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.CMYm76.tmp
        • Size 6KB
        • SHA256 29c72c37e7e9e5cdfb74432fc14df53fed909f51b0d666f60479fefc3ca06bc3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.IplLCW.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.IplLCW.tmp
        • Size 8KB
        • SHA256 0b3bd26badc077388b174e8e093bcb664e9326d0c64b9fa8db126b1191d7fb2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.Qenm2D.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.Qenm2D.tmp
        • Size 6KB
        • SHA256 78710f5054b304da39853dd520d30ddfa96dd8c276250cc9cd9828c9350bac5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.j4miFp.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.j4miFp.tmp
        • Size 8KB
        • SHA256 58e4dc5d1034fb022e0258974ea9aaa67b8748ffd7989a500c20459ec3d144c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof.s4Xynx.tmp

        • Path /data/misc/profiles/cur/0/app.revenge.manager/primary.prof.s4Xynx.tmp
        • Size 8KB
        • SHA256 eadc632be30af5685f2e276ecd58c47b1bc5bdf1a92ee6c130c89785554476db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk.tmp

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/base-342016.apk.tmp
        • Size 88.7MB
        • SHA256 8e0c05e051b45c7818dcde4c103b7074686d27eaad2a442b546129d54ae22037
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.en-342016.apk.tmp

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/config.en-342016.apk.tmp
        • Size 68KB
        • SHA256 95b0deddb1937e777f1dccd2d953c3e8a44bbe5340c5071b543526be9a9caab8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.x86_64-342016.apk.tmp

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/config.x86_64-342016.apk.tmp
        • Size 62.2MB
        • SHA256 8ef09a58f7ce4b2fe3b57cdd0e3c64509022d4ee7255fa7f6a6aa4be8d35974b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.xxhdpi-342016.apk.tmp

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/config.xxhdpi-342016.apk.tmp
        • Size 10.9MB
        • SHA256 94abc4ad09ca724260efc1fb3bbe43a558471e4a5d3cfe4e600e4775ed5244e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/base-342016.apk
        • Size 88.7MB
        • SHA256 913f01b6921a034b954650eeb3aa4e94987d7dd92f7479b6512cc49fbc0f2ad0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/base-342016.apk
        • Size 88.7MB
        • SHA256 9257bd42809977965cc9eaf11650e8d09ad96bf06a82e55560fe389deeb5aed5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/base-342016.apk
        • Size 87.7MB
        • SHA256 f62602c4062a05e300cb30d883e69c50e1e8e2f13d4d7ba609f5f1a579cb3ee9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/base-342016.apk
        • Size 87.7MB
        • SHA256 6cf576351a80897658fdabc7f4f5252ace2552a75e9d90d6060e0eb0bf49c2a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/base-342016.apk
        • Size 89.0MB
        • SHA256 c47301e4691fe94af26a541de6cbb5c0da0849d122414dc003b45d9004f245dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.en-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/config.en-342016.apk
        • Size 67KB
        • SHA256 89976933cea30cfa1e1c5575e728159ac2d769443416f8c28be32a3cfe1b3865
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.en-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/config.en-342016.apk
        • Size 117KB
        • SHA256 9bc30a33d88c566b0f816ce14f09bf6227cd9bda7459a5033392ef8b9df620d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.x86_64-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/config.x86_64-342016.apk
        • Size 62.2MB
        • SHA256 3843e811e88b724c43257ab6bf8dc4e4a00419a19cab5240ae36c603720ad9ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.xxhdpi-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/config.xxhdpi-342016.apk
        • Size 10.9MB
        • SHA256 9c4e78606da0c43080ff75d7afc53ccb99152027ceca5bcaa7bdb574a36bd756
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.xxhdpi-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/config.xxhdpi-342016.apk
        • Size 11.2MB
        • SHA256 b6d4becdb8118b5cd95f62ddae5195cb5fbc60f1e4540ac0cdb3a117fe39473e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016-433-lspatched.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/lspatched/base-342016-433-lspatched.apk
        • Size 94.9MB
        • SHA256 bfcba4356503fc47fd70d9086414da069e4ce41a2b7b95905d715a4c089c009c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.en-342016-433-lspatched.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/lspatched/config.en-342016-433-lspatched.apk
        • Size 5.2MB
        • SHA256 f777faffb2dd7e8a980f61985d747dbd1d8dc8cba1864f3aa4da94214fa8f9fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.x86_64-342016-433-lspatched.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/lspatched/config.x86_64-342016-433-lspatched.apk
        • Size 67.3MB
        • SHA256 91e136f2e0daeaa1569803fb0a324a52ebdf6b30ce7ec78c44c12d5fbbbf770f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.xxhdpi-342016-433-lspatched.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/patched/lspatched/config.xxhdpi-342016-433-lspatched.apk
        • Size 16.3MB
        • SHA256 51f3ef3b35be52a0d237b2a67cc79ee95a3eada0ae8574a92525075af6a060f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/signed/base-342016.apk
        • Size 89.0MB
        • SHA256 5eda3373d5e537835dc02975bb5820926de115884af0ac9e5cb41b8aac344307
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.en-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/signed/config.en-342016.apk
        • Size 120KB
        • SHA256 3b2dbf6bb888afc0c66fbdb58c0f39091ff5d75ccfc30356a2656bf0fba45436
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.x86_64-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/signed/config.x86_64-342016.apk
        • Size 62.2MB
        • SHA256 34b24f667739e4139c33c6f0c6c508b7d4f9a4cb93623271d6e790303a4ba024
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config.xxhdpi-342016.apk

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/342016/signed/config.xxhdpi-342016.apk
        • Size 11.1MB
        • SHA256 24629729f8d5332bd73c20c54412d8b69b0ddef8ba2263969b0ad9cde121404a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xposed.apk.tmp

        • Path /storage/emulated/0/Android/data/app.revenge.manager/cache/xposed.apk.tmp
        • Size 3.0MB
        • SHA256 eec7aac51419223cf631678fa640083645009ab58ebe2a20f6eb0e91ae651a25
        • MD5 SHA1 SHA512 SSDEEP TLSH