Analysis
- user interaction
yes - max time kernel
314s - max time network
901s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
07/09/2026, 15:47
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
microg-7.1.0-arm64-v8a.apk
Resource
android-33-x64-arm64-20260708-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
microg-7.1.0-arm64-v8a.apk
Resource
android-34-x64-arm64-20260325.1-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
microg-7.1.0-arm64-v8a.apk
Resource
android-35-x64-arm64-20260325-en
1 signatures
900 seconds
General
- Target microg-7.1.0-arm64-v8a.apk
- Size 42.7MB
- Sample260907-s8dpgayse1
- SHA256 46d10cffd2973992ef5b99667fb227ad4e57addd81b81af017de6030e09c67ea
- MD5 b61c29c89cb2d22bf26f5a213535230b
- SHA1 3cb582463b04ab1ec07a585aeda506898827e57e
- SHA512 cf73e71a5fd67325a61abde641df1c46850a109d4e6e485fbb0b5079408aa394223e48316e4a28cf655abe87e1f7e12a67cab65ad2b5642abb5af9c5e73a240b
- SSDEEP 786432:4u8kiSSG7pAsMhuX7qNnuON/HE35hBk9c5LtHNd7izWwP3uWzFtI+6:4uni87Sh4qNnucHE3dk9cfHN5IWC+Q6
- TLSH T1F5A712DAA3689E1EC433807A890D7329665A4D39DB83D3C369183B1C24F75F88A557FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS app.revanced.android.gms:ui
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.revanced.android.gms/databases/exposure.db
- Size 124KB
- SHA256 6066bb35395d81e5c8acb169b8ea27c80645323212f20e63e76840ad8bebdf64
- MD5 12c32509b9a6431d80c08b99db88fd0a
- SHA1 c466ae8b2aa809de26ea2c367e8d437d4c1181f5
- SHA512 1e2c51f74bedf8494f8d40e0904f9fb632b4b0fe66b313f1198897379cd7b646142ae4424691caf867bc1fff562513f6999ac50831ac86fdd1ca04e4930dffe3
- SSDEEP 48:T2yodNH8HzXpDA1tRigG9oBoSkH6Mtjdr/SOjl5ZEDxJjSegmA2ap2a8HpfgqLkc:KXdNcHzts+XSk5BOOqA2akHHKHng2AxB
- TLSH T139C3CE0F4E44DE01D8F6A835D4970AB15B3A915E4F83FE922EE899B14D92C30646F37C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revanced.android.gms/databases/exposure.db-journal
- Size 14KB
- SHA256 dbbf11087f0f53ab6904c4a3ab582caf3a6ce6c97f6723c117d8e832c662c872
- MD5 f1eb17315339ad71a8112526aeff75b6
- SHA1 8a211fad49fe383ed8219ae71be4535cca68a6b5
- SHA512 2ae8db20c90fd2f25c98901dae1822a65ddf0773f1683daaa5cd01a75aae45b28e153bd8b7f2d42431ce23b23e6f9022c28dc6d208947fe13011c312cabb93d0
- SSDEEP 384:MN/nHqp6RcxYTmMAYWjS3XbdQFT+2MwLlD74A1CA:cqCcJMXWQXb6F+nwLlDkaZ
- TLSH T1D2629C16066F95FDEF06B3DDCE9193E190A844EC2F769C389CA1309B4BE16C58462B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revanced.android.gms/databases/exposure.db-shm
- Size 32KB
- SHA256 221ef3d396ac87ea022c78721485db3bd8f72000614db6912b86a8b07e81a077
- MD5 b3cee27d1b5660d87874122022776d03
- SHA1 2fb53dc64efae1a67b39e7317781230201a5eaa2
- SHA512 331c8c75b5b18adc4e11c8b00ee82ab0f5dcdeb8b64f685e79f1cebdcfd526a91bd4b2aa55dd7280c5c554602f240d5f75122696a6b687fc02a5bb1843cf3299
- SSDEEP 3:0llkk/tltt:c+E/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/app.revanced.android.gms/databases/exposure.db-wal
- Size 136KB
- SHA256 d6f29e84f05db2a93ecf46ba668002f566abb77f7cc8d8d3f84dda2f8ebd185b
- MD5 71517fae60518024de9b7be57c982326
- SHA1 96e83614e2b496fbb8dd3a39a21284ba8e6593dd
- SHA512 143beaff6c35e43a374d9ef4b0558917dd86387fa538ddd1774b1c212d473cc76d43d288a7573ff24ccfaff6acc9c68a7170f3952a0729afc9208ef4f4f1d79b
- SSDEEP 96:kaHOX2sn1XdNcHzts+XSk5BOOPKA2akHHKHng2AxB:ka47dNcH5saHfK7pHHKHng2AxB
- TLSH T163D31D8E8E44DE41D4F6B831C5430FA56B7A415E8F82FE926EA895B14D51C30E02FB7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revanced.android.gms/databases/exposure.db-wal
- Size 16KB
- SHA256 b9ef38a76479af86c3318c82980c63007c1fc4adaad8ada8d86b0d7b7dc7075b
- MD5 47a8e38c1b1a2cc057cf24fa76318102
- SHA1 1a32b008857101a042de9c625f0fbb3e80ecca26
- SHA512 c7ffb584c4dbf2365d17f7cf7bc1e4248b9c2840600b18e654d7a177d17bc5bd8402fa431fceca91570bdc2299e4b7c0ef73377dd0f1b60a2961b027c29f0449
- SSDEEP 6:kS+X6Srktkle6S+9FZdvlWlOERX4PBX4ogLugMBX4suuK+/A6Sq6lunnGVsogOw2:kS+X6gllllzdvloRmBEyPbP/A6lugOw2
- TLSH T17272C2CCAB810E93C618233656C4CB4C2D912A19CF66DB07955108642C0A6A8EA51F0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb
- Size 28KB
- SHA256 6cec9f48fd3693794676b81516c47c39dba7d642f7503c4381791c6848ccab59
- MD5 4cc7bea026e8f74656716d1d4b7cf220
- SHA1 3e808094672a8756abbafe0824f849ece422ced9
- SHA512 f69b34a0b63ba1c743e4847e8be105639bc7d987c822a85beed296a5efafaf749708ef6a6e4341b45d8f7f0cb469ee4e95fa8a41498c80eec7f9d1759e65e2cd
- SSDEEP 24:TP+RQVbJQYIfgwTPi0F5Aj7fIJlg/EGSiI:TGWVbJnbwTP8fIgTS
- TLSH T19ED26DCA8F20CB13D547053B6D5463240F39E75A55632783ABF861B16D87406D932CFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 4cc46b1127129419bc05578b272b3db953221c6584268e5fea35b2595c634ea9
- MD5 4e3e716914038cb079e7930591b051f2
- SHA1 80c6375781073485524c198c847e2f0f3b137bb6
- SHA512 eb2ecc2c1a3de37b6eb4df3496edc6ca59241ba41421d22d6b0a6c03f44e99ae2d0763e5c22e332b7aef9ab855629f91f9dc36b8c910aa8b056104896ce8158b
- MD5 SHA1 SHA512
- Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 39869990fe9025f24d856d5405da061c75c19e3ef1b060ebea2157fcebdaf0d1
- MD5 0a3d533b1198bcf7d05388c541878371
- SHA1 3558f2e7c9e4654bfdcd1fd469e5b60dfb7b54f5
- SHA512 7ff77b0a618c1c1d9c809ff319c43bbb6b78382fae128b0296a07659f0b99eb1d65298f1ec0228662d5a8384fa176d2678d8d3ea660aa97194c6ef6448ff40f8
- SSDEEP 6:KKm1jsUsfg9FZdvlWlOERX4PBX4ogLugMBX4suuK+/o9QtAGWWqViOw2:KKm1oUsizdvloRmBEyPbP/oxGWWXOw2
- TLSH T14672C24DB34415B3C2AD87774DC5D3C48E62F6181F63C7072560185E6E027A8BC50D88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.revanced.android.gms/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 fa84ea975cb85fe7081db3af127a340e88ef049418456a49194ca6a3b80a65ba
- MD5 fdda5be7ab615f656e830fd17b02bc95
- SHA1 fdaf34733ffa58d2501275ebffeed6b85e9304af
- SHA512 b543fe96f7d8fe4f8a1a9d79b075465ec3f333ee93885105f67678e04e39caccc85d0a0ef6df84e04a54bdabc5eee0d0fd5fd2e8960ceff426a08138ad71f581
- SSDEEP 48:1GWVbJnbwTP8fIgTSP/HQVmLkIPW8I870:8WxJnc6IlPPzkIPpIv
- TLSH T112B3AF8D5E1C4E36C18D03B6EDE513101F35D649599217C2B6AC90B75B810996A73CFD
- MD5 SHA1 SHA512 SSDEEP TLSH