Resubmissions

07/01/2024, 11:44

240107-nwnxfsdbd9

07/01/2024, 08:01

240107-jwk4caacc4

07/01/2024, 07:56

240107-js11dshaep8

Analysis

  • max time kernel
    3807351s
  • max time network
    163s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    07/01/2024, 07:56

General

  • Target
    Free%20Robux%20Generator_8.1.4z_apkcombo.com.apk
  • Size 18.1MB
  • Sample240107-js11dshaep
  • SHA256 d001980e22dfb57e7a29d6b1b3637985578a706ad2a3a98d39a071e260ddff9b
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell information.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.alanhussain.freerobuxplayandearn
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4271
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.alanhussain.freerobuxplayandearn/files/audience_network.dex --output-vdex-fd=103 --oat-fd=104 --oat-location=/data/user/0/com.alanhussain.freerobuxplayandearn/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4490
  • com.alanhussain.freerobuxplayandearn:Metrica
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4336

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.work.workdb

        • Path /data/data/com.alanhussain.freerobuxplayandearn/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 47ce5149eb70dfc454c83ea448e907d3795249327d9b994bae2738329ef266e1
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.alanhussain.freerobuxplayandearn/databases/androidx.work.workdb-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 f7478dabbb6cf88451feeb48a6728b3a3c83185e24040e0901f980f859950935
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 b0d078815366c2cd853708e1c0a5f7eccb8559d2a27057924e7b616d74dbb3cc
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 f8ee1632a5f07ebe727205889fc5688b7154ff24d35de81a793efc5af926c11a
        • MD5 SHA1 SHA512

        audience_network.dex

        • Path /data/data/com.alanhussain.freerobuxplayandearn/files/audience_network.dex
        • Size 152KB
        • SHA256 09e1746ab8a3022aac7ae99ccd0dbd5e8c5d10a6a499290be50c423fe86be609
        • MD5 SHA1 SHA512 SSDEEP

        credentials.dat

        • Path /data/data/com.alanhussain.freerobuxplayandearn/files/credentials.dat
        • Size 20KB
        • SHA256 6287afb151f3042b1f6308cb4136de308a262bffd5f91a0d9dad85bd83f40ce8
        • MD5 SHA1 SHA512 SSDEEP

        audience_network.dex.cur.prof

        • Path /data/data/com.alanhussain.freerobuxplayandearn/files/oat/audience_network.dex.cur.prof
        • Size 335B
        • SHA256 a56ea8e4eec8372b4dafd77cf13532fd2e14214f9dbed9291ff145beeaa5be57
        • MD5 SHA1 SHA512

        credentials.dat

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/credentials.dat
        • Size 8KB
        • SHA256 08df199429ff7c29e297cd979e5a30524c3723a5b9e9a29cacc485d4c4b7deb7
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.alanhussain.freerobuxplayandearn

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.alanhussain.freerobuxplayandearn-shm

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn-shm
        • Size 8KB
        • SHA256 429e6aa2a4ab95c2598321c2bdd0b005b0d7508965662653fcacc99dfe0d85bb
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.alanhussain.freerobuxplayandearn-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn-wal
        • Size 32B
        • SHA256 88eabab6347417c9284102ebd184250f9fada63daef5947794c03ac30348640a
        • MD5 SHA1 SHA512

        db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 3d77a838c8576acdfaa245c1f982231a5c0d40d47fdc5e72b9ab859e690bb43b
        • MD5 SHA1 SHA512

        db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-wal
        • Size 128KB
        • SHA256 76a2027a4b457dbb62f9aed4dd552e082346a3e63ba8f61a8d1e1c1b62b5b115
        • MD5 SHA1 SHA512 SSDEEP

        metrica_aip.db

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_aip.db
        • Size 20KB
        • SHA256 f8ca4fa23c9b33c71b761fdea757f2ee3cb9126bbce13b02d8193cf8696afe1a
        • MD5 SHA1 SHA512 SSDEEP

        metrica_aip.db-journal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_aip.db-journal
        • Size 8KB
        • SHA256 dba6bccb8c582a17d429a97d429da8e2854cdf77536a2c55ad815e1618273a08
        • MD5 SHA1 SHA512 SSDEEP

        metrica_aip.db-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_aip.db-wal
        • Size 20KB
        • SHA256 71b16dc18c2f57c6d62b6f8a03c8c2f649e728b13cc1a65df64221f94f907531
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db
        • Size 32KB
        • SHA256 eeec53694fa9a1f03825cf6db66e603c2701b16917e6844546a88e2857a8df16
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 b1c4fa71f3945ba66b34df6c52ca73ca89c5b1a20ee0050442f299d60a31c07a
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 ad254a99903e7b865efdf7b5cb22dd35a1b2300da81cbe8797a9a47e6063b6e6
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 5dcc9557a91cc9dce00bae9c804a01d761acf7bd7ea88bc93ed7db7390e1dd5c
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 0e5d6290430616ba5b0ff85ca6f6cd7ca21bf06f6cafda0c1b92b8025bf9f79a
        • MD5 SHA1 SHA512

        metrica_client_data.db-shm

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db-shm
        • Size 20KB
        • SHA256 a9bf4d41f8a7b1fdc8f375ba2aaba605035d5492de120eced473a9760e06830f
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db-wal
        • Size 12KB
        • SHA256 9cfd2b643892c97498abc1904ad620bb5116336ebd4a851c44ee833914d65cc0
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db-wal
        • Size 8KB
        • SHA256 c3f6b28f5328494b03f92a8b664046393c02a473f6474edf005da05c5b0da550
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db-wal
        • Size 8KB
        • SHA256 93683eb84a787a8b25e026997d91c90b6f5c385e5e1307ee25cfaa03af005f96
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_client_data.db-wal
        • Size 8KB
        • SHA256 9125dc41fc0412c825abacd2714507ff656feb14b2b5cf415f868d006f112e1f
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-wal

        • Path /data/data/com.alanhussain.freerobuxplayandearn/no_backup/metrica_data.db-wal
        • Size 1.4MB
        • SHA256 123b9b2d8d1b0278a77316e5d8a3785bcc0e3cc2a32ac7cc75327c9b4920febe
        • MD5 SHA1 SHA512 SSDEEP

        audience_network.dex

        • Path /data/user/0/com.alanhussain.freerobuxplayandearn/files/audience_network.dex
        • Size 3.2MB
        • SHA256 26fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
        • MD5 SHA1 SHA512 SSDEEP

        audience_network.dex

        • Path /data/user/0/com.alanhussain.freerobuxplayandearn/files/audience_network.dex
        • Size 3.2MB
        • SHA256 db97838bf29d022b67acffd5f7c931ba63746eb645718a04d02ec78c576cca46
        • MD5 SHA1 SHA512 SSDEEP