Analysis

  • user interaction
    yes
  • max time kernel
    314s
  • max time network
    901s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    07/09/2026, 15:47

General

  • Target
    microg-7.1.0-arm64-v8a.apk
  • Size 42.7MB
  • Sample260907-s8dpgayse1
  • SHA256 46d10cffd2973992ef5b99667fb227ad4e57addd81b81af017de6030e09c67ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

Processes

  • app.revanced.android.gms:ui
    1⤵
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:3266
  • app.revanced.android.gms
    1⤵
      PID:3296

    Network

          MITRE ATT&CK Mobile v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          exposure.db

          • Path /data/data/app.revanced.android.gms/databases/exposure.db
          • Size 124KB
          • SHA256 6066bb35395d81e5c8acb169b8ea27c80645323212f20e63e76840ad8bebdf64
          • MD5 SHA1 SHA512 SSDEEP TLSH

          exposure.db-journal

          • Path /data/data/app.revanced.android.gms/databases/exposure.db-journal
          • Size 14KB
          • SHA256 dbbf11087f0f53ab6904c4a3ab582caf3a6ce6c97f6723c117d8e832c662c872
          • MD5 SHA1 SHA512 SSDEEP TLSH

          exposure.db-shm

          • Path /data/data/app.revanced.android.gms/databases/exposure.db-shm
          • Size 32KB
          • SHA256 221ef3d396ac87ea022c78721485db3bd8f72000614db6912b86a8b07e81a077
          • MD5 SHA1 SHA512 SSDEEP

          exposure.db-wal

          • Path /data/data/app.revanced.android.gms/databases/exposure.db-wal
          • Size 136KB
          • SHA256 d6f29e84f05db2a93ecf46ba668002f566abb77f7cc8d8d3f84dda2f8ebd185b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          exposure.db-wal

          • Path /data/data/app.revanced.android.gms/databases/exposure.db-wal
          • Size 16KB
          • SHA256 b9ef38a76479af86c3318c82980c63007c1fc4adaad8ada8d86b0d7b7dc7075b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          androidx.work.workdb

          • Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb
          • Size 28KB
          • SHA256 6cec9f48fd3693794676b81516c47c39dba7d642f7503c4381791c6848ccab59
          • MD5 SHA1 SHA512 SSDEEP TLSH

          androidx.work.workdb-journal

          • Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-journal
          • Size 512B
          • SHA256 4cc46b1127129419bc05578b272b3db953221c6584268e5fea35b2595c634ea9
          • MD5 SHA1 SHA512

          androidx.work.workdb-shm

          • Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-shm
          • Size 32KB
          • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-wal

          • Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-wal
          • Size 16KB
          • SHA256 39869990fe9025f24d856d5405da061c75c19e3ef1b060ebea2157fcebdaf0d1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          androidx.work.workdb-wal

          • Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-wal
          • Size 108KB
          • SHA256 fa84ea975cb85fe7081db3af127a340e88ef049418456a49194ca6a3b80a65ba
          • MD5 SHA1 SHA512 SSDEEP TLSH