Overview

overview

7

Static

static

7

Roblox_17743210.apk

android-9-x86

7

aps-mraid.js

android-9-x86

aps-mraid.js

android-10-x64

aps-mraid.js

android-11-x64

dtb-m.js

android-9-x86

dtb-m.js

android-10-x64

dtb-m.js

android-11-x64

jquery.fle...min.js

android-9-x86

jquery.fle...min.js

android-10-x64

jquery.fle...min.js

android-11-x64

omsdk-v1.js

android-9-x86

omsdk-v1.js

android-10-x64

omsdk-v1.js

android-11-x64

settings.js

android-9-x86

settings.js

android-10-x64

settings.js

android-11-x64

user_custom_script.js

android-9-x86

user_custom_script.js

android-10-x64

user_custom_script.js

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    Roblox_17743210.apk

  • Size

    23.0MB

  • MD5

    898301570da4ca4df5077365b8a2e9e6

  • SHA1

    d5aa47e5b8607f6687d3c1d028f7324735268554

  • SHA256

    00f276b94f5a1fe326e661f745fa1445590f7176a95c22e265d02c33435fd305

  • SHA512

    bfd40dfda32198c1b9eb56a6affdf733ba2b86d87333454d233b1164f54c4b2c2f23d0351b05b2fc511f8ee68a20e8d680950c770da7060e112be4e4f1a330b1

  • SSDEEP

    393216:pwpsA21Ndpa/PnK/VfdIOXIHBYCV1GZww3Wa7P1MJEzvA/OrnyH/nruWYcyDLizl:pwpa1RovK/VfdIvBT+N7P1MJEDrrnyf1

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • Roblox_17743210.apk
    .apk android arch:arm64 arch:arm

    Password: infected

    com.wRoblox_17743210

    com.appsgeyser.multiTabApp.MainNavigationActivity


  • Raleway-Thin.ttf
  • Roboto-Bold.ttf
  • Roboto-Light.ttf
  • Roboto-Medium.ttf
  • Roboto-Regular.ttf
  • a4g.apdnetwork
  • adcolony.apdnetwork
  • adcolony.bmnetwork
  • admob.apdnetwork
  • amazon.bmnetwork
  • applovin.apdnetwork
  • aps-mraid.js
    .js
  • aps_mobile_client_config.json
  • audience_network.dex
    .dex
  • bidmachine.apdnetwork
  • criteo.bmnetwork
  • dtb-m.js
    .js
  • dynamic_default.json
  • facebook.apdnetwork
  • from_cartoon _blocks.ttf
  • icon.png
    .png

    Password: infected

  • index.html
    .xml .js
  • ironsource.apdnetwork
  • jquery.flexslider-min.js
    .js
  • meta_audience.bmnetwork
  • mraid.apdnetwork
  • nast.apdnetwork
  • notsy.apdnetwork
  • notsy.bmnetwork
  • omsdk-v1.js
    .js
  • pangle.bmnetwork
  • settings.js
    .js
  • settings.json
  • splash_screen.png
    .png

    Password: infected

  • style.css
  • tt_mime_type.pro
  • tt_na.czl
  • tt_nd
    .elf linux x86
  • user_custom_script.js
    .js
  • vast.apdnetwork

Android Permissions

Roblox_17743210.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.webkit.permission.PLUGIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.QUICKBOOT_POWERON

android.permission.NFC

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

com.android.alarm.permission.SET_ALARM

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.AD_ID

com.android.vending.BILLING

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.wRoblox_17743210.permission.C2D_MESSAGE

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE