hxxps://www[.]mediafire[.]com/file/l62rvsg6i5umndx/Roblox_signed[.]apk/file

Analysis

max time kernel
1795s
max time network
1660s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
07/03/2024, 03:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://www.mediafire.com/file/l62rvsg6i5umndx/Roblox_signed.apk/file

Score

7^/10

collection

Malware Config

Signatures

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

com.android.chrome
1⤵
PID:4370

com.android.chrome
1⤵
PID:5235

com.android.chrome
1⤵
- Reads the content of photos stored on the user's device.
PID:5483

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
334KB

MD5
c2dda9ed3a7cae81debb3b6bb0827dd0

SHA1
32495f73659eefde2764c0ee16a0e978c1b6148a

SHA256
c4e1a5ba428f50f098fce13c827f0b6f11d34c7eb469abe4bdb58b039e609131

SHA512
20a53344df3f8dab888cc71f8e21d4038f7c3ea5ed2c9cd09854aab76044815871a3d458a57744f34207b243c2e03f26a96b5030b81d0a5cac30f80a54707bf8

Download Submit
files/dom-1.html

Filesize
120KB

MD5
0e98f966e89167c486c9fc6e11d99aa6

SHA1
4a030122e30fc33771f97c3b3d3d31902f497ccb

SHA256
d2def788972c8f65e7532e78a9efad4e0a671a71c36b714e620785aa23086fab

SHA512
70b1de52c3135a93029f7c032121ef7f0cff859e6c3ad2c08dd1a2c4b1d9bd2f7a6f53b8ec4f4d5d559e3209ab370fb0e8477bcf33a34d98cbd01d3a29f485e5

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.YAw7hu

Filesize
640KB

MD5
6bee537b9a5dd75e6fa472df0193800f

SHA1
f587f4c565c1c3928837002997d307cd2ca1aa4d

SHA256
4a826b2eb66e929f8436d7610b54f2e714cda0a4eb525b956297094dc47693dc

SHA512
62355fbcaba35165a691465ecdaea014be3b9274d7137bb9ea3ad1810a77d6a546f08f60b6e413d7db6428ede93408e34d040dbcc20346265971be42b6d1ddea

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.sU04BT

Filesize
240KB

MD5
7539f4b77631c8f8385932588e248fbd

SHA1
62d4602130f3ad5c8af04c648524c047aea85dc9

SHA256
69dc71246117f71850f962bfc5800b943ecccd292d24b8ec18760c83363e6a85

SHA512
61cedc901fcb03b4bc3824f59a0c8d210c1883e7e5378490ed0e8b0a393f572f67bff567e8aa4081e33ae65c1ed93955398e48df08be23df1c862b1f885b4526

Download Submit
/storage/emulated/0/Download/.pending-1710385637-Roblox_signed.apk

Filesize
192KB

MD5
5136126b075edca61b06dc08f103c4d7

SHA1
dd0db9037387b13a05181b7fd0caf69f32e2e06b

SHA256
87332d498e9cde640b43498a1e98b62090964b5749d649eaf1940fa57c0edfcd

SHA512
9f5b827e159ec0114765105a3e00bc2655d3bdfd853b562978b62c1e2f1f6133a4df470408f24fbd805a7acf08629ca846e7b2b8b9d50ef1d13f11e6e039bd21

Download Submit
/storage/emulated/0/Download/.pending-1710385637-Roblox_signed.apk (deleted)

Filesize
512KB

MD5
59071590099d21dd439896592338bf95

SHA1
6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c

SHA256
07854d2fef297a06ba81685e660c332de36d5d18d546927d30daad6d7fda1541

SHA512
eedb6cadbceb2c991fc6f68dccb80463b3f660c5358acd7d705398ae2e3df2b4327f0f6c6746486848bd2992b379776483a98063ae96edb45877bb0314874668

Download Submit