Analysis
-
max time kernel
96s -
max time network
109s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
15/03/2024, 20:39
Static task
static1
Behavioral task
behavioral1
Sample
Free Robux Generator_8.1.4z_apkcombo.com.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
Free Robux Generator_8.1.4z_apkcombo.com.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
Free Robux Generator_8.1.4z_apkcombo.com.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
Free Robux Generator_8.1.4z_apkcombo.com.apk
-
Size
18.1MB
-
MD5
056ec9a8d3b583a4eced1934ae50b6b2
-
SHA1
517801feb2e0033ac489c73c416f2681d97fb1e9
-
SHA256
d001980e22dfb57e7a29d6b1b3637985578a706ad2a3a98d39a071e260ddff9b
-
SHA512
93213e270a1766f952d0913c9328f8e9b583f28ee9ea6826fd363c16ee95dd4c96f6bf389139ce3ca2b184ed4357084e9020157dd58b9d938bea961dbbd5d25b
-
SSDEEP
393216:6LDGOUJK8DIR7T1AzLcsf/PVDtBoWvdxYFg+pC:6DwTy1Ancsf/ttBr3t
Malware Config
Signatures
-
Requests cell location 1 TTPs 2 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.alanhussain.freerobuxplayandearn:Metrica Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.alanhussain.freerobuxplayandearn:Metrica -
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.alanhussain.freerobuxplayandearn/files/audience_network.dex 4224 com.alanhussain.freerobuxplayandearn /data/user/0/com.alanhussain.freerobuxplayandearn/files/audience_network.dex 4224 com.alanhussain.freerobuxplayandearn -
Reads information about phone network operator. 1 TTPs
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.alanhussain.freerobuxplayandearn -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.alanhussain.freerobuxplayandearn:Metrica
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD56a161a4e78b42ac96b83c44f53c486ad
SHA1b7f48d67fcb8719a7229310073abe0c6d9e08bf0
SHA256c90dd3522fcb410d01ac64b7bbead59cb167e1940da4a9a70c422381008fb581
SHA51292864f6ed972d36c4da05e199d52500498ed64da887b8b7c48814150b34f670dfbd2efab4a85fa2e9a25c1eb3cd7fe661eac4a3887f5e6ac61ebb28394a4f45a
-
Filesize
16KB
MD5fcf8c87acb292c3855934aaba831afe7
SHA171f35b65c983d6bd88b92ada6568af7284556d3b
SHA256c3acdfdabbe479dcc9bcaebc4bf8e739bc50a5893eab97fbb7658271f797cd83
SHA51263fe30506f21de814cd8a5deee255e6b7b3489989c2b6ed1c52bc0b0a1c41396a3691161171217b4b81b50bcca7b1f6f52fff24553fb2ec3c4d2ec3575006cd4
-
Filesize
153KB
MD51224e5ef4199bef8711e89a84f123df2
SHA1548c0127786259e50a0dc4d153a9f44a29e265db
SHA256a89253a89f519d5c4f7f56db6c20d9a865b5f96f666a2f231a78136050938e09
SHA512ebab77151de14fd87a59dec939ca3f6faf1b4ccdb83893a56e168e6fe2661ba216276aa58cade68b0c682b427ad875442b779f837dcad59e40d33875a8045d97
-
Filesize
345B
MD5462b51f5a40a427889e457383fdfb87f
SHA1da03fc765beee49e11dcb4f5fb18ef4bd426d1d0
SHA256cf8cbfb3cfb40260b6e25190f3449e29fcdcc5df4290dd9d3c7c8a2b0eab7c57
SHA5128c6dc91a1373545a81c8317e733aaf861c32b85b0b74502497fc42c08375525bd5d1d3b67d8f60094f041012108ccfd330d5e798a8fbafd500dc09c3f8299cde
-
Filesize
8KB
MD5d4510a92257862918e8a2d42fd12d063
SHA189b51cee3606e52d510034e0d9d682f7cad39299
SHA256c1b915b66365f2f613a9a7f0b3eb44d0d898c32b336ddf1bfc6c8a1d4673773f
SHA512eca2ea5b632420d88a588dd8dcee32ec7575cad44712b7b1364c60513bbd3d831aad3d1c8895cf9c51fb771d7f330c9a52681221d799cc9af24ac1ec5fa6444d
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn
Filesize32B
MD5f8d6edd250a9e5d502662940213e58a8
SHA16e9210a240104f79da7571ebfff41f494668d0e5
SHA256b1dbe6cdc5842fdeccea51b85b4abd67268fd519d5b89b11dbb344c471af5019
SHA512014bacc14ade70a8fa71fe21550e088cc98ff527f0599aa00cbdcc2530f7ca9dfcac46ef6a671cc2dadf891795cd9410bb62621adf0a1a48b6113205bb27fb0e
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn-journal
Filesize8KB
MD5a9861741553eb34f861ea1ef0ca3a2c5
SHA1a11ca7f8e9fa4aad524b18270c45471db5587ef2
SHA256dbbeb714d7e8d73c0e467e78ad437af135af4df47d21821d46bbd1ae07e7799e
SHA51293f0b163fc1d478cbed47b686a2b891ce10f66a2fbf417610df2de1e9c971cc6d75bcac32a4463472bb4c41cfd514e7b539eb36d4eb2d208b798ba5685f90c58
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn-shm
Filesize8KB
MD5f67541a7bd883e33f06e94b4142f2536
SHA140770b2f36b051e0a68eda90c8eb89dd15c2f53e
SHA2561534da1e40042046b10bc4f76fad93155f52c84c4f99a01c642a351adadad088
SHA5127f4d919e0347535f70e7a4e3855bf696b7b0e9874df43272fdd511d3c890726c6ff6af7b11541bc59c1f8d4faf3722f43725b60dd73306b6aeb4bf0f3242aa94
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn-wal
Filesize20KB
MD546b206a4b9a662178c0fbac827ed062d
SHA17f6085d8f71224d595b9e7759daef907d4b9d634
SHA256f8ca4fa23c9b33c71b761fdea757f2ee3cb9126bbce13b02d8193cf8696afe1a
SHA5121230895c4b075c0b193aa828ac80a291e7b3471ad561439957b410fef601960d6626541a5eccbb349d2e20a8541a2783f1519773fc38765d252b342e9b24e8e2
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize32KB
MD51c4274aa7a9a5cac8c6d1df71e4588c6
SHA1abaecd685e01cc68801292e3dc7085654a22feba
SHA2563f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be
SHA5121adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD5dd3ee62a13f3aba9a0c8833686bf38a0
SHA15cd4cf6a2911358819f975df175fea1c0f0d7c52
SHA2568deb57d0adbdf63d750f803c957437fa4c3d7c483a84f992ed5e06dcf95a6ae0
SHA5123e4788413dbb4c8662dc27e8e7fe1c761fd8bc89eb6932669c701775b0fbf6b054890364212e6e23c87b3eaeb3e8f62b7b9b2ac61a4401bfa1e503554a9dcff8
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-shm
Filesize8KB
MD5a153bceb265af18f8ff224ef57ea4e9f
SHA15eb8e3e3bd85a4848b0a4a9d93fbe00b4508b850
SHA256db8c4315e57fd41627b8d254b7fdfc3922a74b344c4cbecbfe403fd0cd781d0e
SHA512ae3fd6ce492a056ba9992836c9ed085fe02da585150e78c619ffc2140c5a400ac9089def3b2106f5e7b00284e311254b50952a6aaf9088e60154d9add0a9eaac
-
/data/data/com.alanhussain.freerobuxplayandearn/no_backup/db_metrica_com.alanhussain.freerobuxplayandearn_20799a27-fa80-4b36-b2db-0f8141f24180-wal
Filesize20KB
MD5c05978223bb49c69ef5f4085b8610f03
SHA17edc4aabbb1bacb8fee96ba27c0a1b9da7c06562
SHA256f39df58d16c5b1e6b7d886dc642438dccb7b60205635c744b3a9b140ff96d4fa
SHA51290447cc132d676431b027852b840223b8728fcca708d80a32c907601ead6ca56014949c44b2046e39af80d2daf8c3f7ceb2b25c7c2970ad3621d1912e3085ff6
-
Filesize
20KB
MD529d697a8b60ba921533d1186b7837ebf
SHA15fb55058c815b7e132662a51090dd175b337fec6
SHA256d567eaae7d91a8e65661206bce644b5dffb10813d232c4698a38657876cb0df6
SHA51217e852c331db70f58802eccfa01b13610446773b21cae7201bc90bb38e3b08e64bf71803564ecf379b08ef30c760f9610ad1338273eb3f299e530c21b0d2a104
-
Filesize
36KB
MD59b3be1918a5e2cdefd0fe72b9fca977f
SHA148555397f4c8cadb31f13813df3ca281f9a6677e
SHA256fef0a8bd3c1712bdf8faaec77fb09211fa1704ee807ee2f77971a128ff8ac97c
SHA5124a1467c2e825ab16e970e421b0ebbf25693ed214f30f0acf4428f049bffcf26fabbe38c97f0fb06bce0e0ce138e8f202fa4bee71d3daa7f3ec78a05a9d3887d0
-
Filesize
32KB
MD5b0b9cdba4bfc45f80727fa8c8a28da75
SHA1bb0c3043542f50486c430b732f9a7a700d17e0da
SHA256af99aa0be7c5061c34628bd04eb0ba1da62e1c5215b7f1e89db51787662b0118
SHA512993b8b6206b31edf871fe589cbb4c74270bcaa8dec98dd40d9a5cbc2e7ac6ebbc99ac9f37789afcb134b8be78989c72a90d13fc260e5dca12a8c0035f40ac8cc
-
Filesize
32KB
MD5a88f07a902aaffcc64544f024526968c
SHA15672457d24d58cd261398a1b13d5bce47dec62be
SHA256856156fab22a39fb590f5c30d7fa4b9e8e8d28339784fd3da5a18458f72c3796
SHA5120c1e9702ac42086544bb4759c4f067b9361ff6f9233f9bbf421b2da177e5dc8bb87f2a8b6bfd9e66baecf498d79957780c377fae3303f532a56acfe72f68ba90
-
Filesize
20KB
MD5409474b71d3e0af3f6c40c93ac16f516
SHA16cdfd03f411041ffe19b80c44da0a06c0f2ea671
SHA256827fcb1e0453e3170e3f0de234affcaaf661c4ce7171fffc1645c90e7fe6d4bb
SHA512284d5ee1fa55fc33bdcac56bdf2b5775302840df6f7d7b13025f49e8dc437ce927bbd11385aca211fa6af5f3e8f98229b11f46ea09d15e8c184092aaea4302c9
-
Filesize
20KB
MD53775e5f9fceece3560356961814c9a88
SHA12a25b45e771f73f8deac45f912d9dcd4a8b4e7b6
SHA2562d0f852ce771c2791ad113e51401660aa2b782cb9cd51edfbd03d8d30c0e08c5
SHA512c24673f0a842428f89d8517c8d64f4a736bac8b025d672f838e87d366ed562b5b8b3eed1a2a9c97452f96a07692015c52a71e2be2a694e5dd815ad5082bef126
-
Filesize
88KB
MD5bbc796325f49d042bcc6d169a8040286
SHA1be8027d1a53ef7a58b204e00666e405250c26379
SHA256b0970562aaed9310dfe4d9a52c425d209621441bd4b2a5c27ffdfea369d4bb64
SHA5123631bd88b98e7af739b51858c79f62901613c70a457425adc93f6a79bcd46d99f3140245fde72dfc76397ae2a2a36bba1df37284bd8d3551c43c490f794e3498
-
Filesize
20KB
MD591c4cf182b55d76cb262d13fe06bc1b6
SHA1b6abf380f81467a830ecaa4d87514c8c2c59df0d
SHA256d6b95b8a6b2d727268bb28ea405c17a524f03be43a0a480e6528ebd920f811ed
SHA512e7a12a84d57b197952b7ce64b3acc2c46a2af3f0e852817df54d20f6a9cbbdf76045e22f9a094526c495534d771b3d4c2917d3c94627c982e9d55ea3cf0fc72d
-
Filesize
8KB
MD594e98325f0bd8752961f80ead22b4d74
SHA162186bd9a000d648092d121c455c1b174fa6907b
SHA25671c84b828930ea8dc9384af7fdf9fe0a939babb42d36e99d175b469933859781
SHA5125e29740bc675c0509c6351593fb30fa44495026063f34d0fac0bc8adceacaa5bdc1d88b19ac12d1cd426fda97cf69a9dfd5a89338a41b46b6387fab442f53944
-
Filesize
512B
MD5db4acd4e75406dbe984925e7d4cf6d58
SHA12e40c4fb683f63f0a0a312bba5527f68ca55a701
SHA256ae40dcf16488e38d9a67651a69ea68e575c40e26bc4e1dba36441cfd3ecfc061
SHA5124ca6ba862169c52a1e64832fb8b1c247289f5d4e8501fd6e96acdb4b66401d62a50c1691b38f0420eecb8b35a58a7ce6687f485e87a7bf4185fdb176c9cab02f
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
3.2MB
MD569cf159b893eefff9a8106cc3ee37e03
SHA1165207adfe8c6047ce9f3dd38aed50796c1660d1
SHA25626fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
SHA512379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa