6037ce84e42f0e0c45273a6d61003d387f9ee89089c11e4c6eaab11a8b26d7c8

Resubmissions

15-04-2024 21:37

240415-1gxx2abb5y 7

15-04-2024 21:33

240415-1d8v5aba8w 7

Analysis

max time kernel
9s
max time network
129s
platform
android_x64
resource
android-33-x64-arm64-20240229-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
submitted
15-04-2024 21:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Arceus_X_1.3.0.apk
Size

177.5MB
MD5

85c134a679c5efb3ca70ba027be24e09
SHA1

ac24722cf1c2453070270fa88b06ca39e6074fbf
SHA256

6037ce84e42f0e0c45273a6d61003d387f9ee89089c11e4c6eaab11a8b26d7c8
SHA512

744477ea5b22ab36899d9f5dc08c5f5bfd849740c85381f355e5ff9910e561ca6266055875b745c512a0d290654f13d98e80683ea74f97d866288362420b259d
SSDEEP

3145728:pseoqomk3vL30DZEqjJq6to42Hggbq9iWlNh0Z6NyenVREPn7zg/WFCs8M7z115+:OJqoNpCJlo42l2UWlN26Nyec7c/WFT8n

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.roblox.client

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.roblox.client

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.roblox.client

com.roblox.client
1⤵
- Checks CPU information
- Checks memory information
- Acquires the wake lock
PID:4306

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.0.tmp

Filesize
5KB

MD5
c5eef79cd7079187de8d766627db1018

SHA1
855f4589cdd6d1cf10eb4bf050722166553ec532

SHA256
f9e62bd8ca0ee0c9583a8f9d6112b90be7eeae69d1bda50f2f50f2a6446961e9

SHA512
f5a2b5c97cbe3d38d73fedffa9d4e7d059dde21e792fe6d65d351ac57b82488e161c3dcd89b66b3250e56740653fe2faadbe1d691bf6f7b6aa8fd16bd1fba441

Download Submit
/data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.1.tmp

Filesize
199KB

MD5
49f6b176f852522593d2790900aae1d0

SHA1
380cefb0af77c522194fa77b3f8de6480afb9527

SHA256
0dc7508a3f105eb78fbcd15416fefa191e0a6415fdab581410318b144c799cac

SHA512
5a692c6c46847dad8a569262b46d0057e6fa0a5488dc74edc6b4bb55e24eb9624d5ac0a50cd9be9f28f74fcbaefdec658b015013b589a8c198af0e0a1c514b5f

Download Submit
/data/data/com.roblox.client/cache/journal

Filesize
126B

MD5
90375661868da8278363a8122c5912fd

SHA1
39d8282ec72bba06f64e01b9ca4747825dadc32e

SHA256
b65f79852f8d2cf02e522e58f2a2d1bdc70c43fe9a4f25be977fd6c642597308

SHA512
ef6bd493d3b0270d61da21fc4516e6cdec08b436942c3c72d59cd598c37a5d924d4d714fc094d951b1df810e8cb31e0194965c8636f9e2b8627c64a0902cacda

Download Submit
/data/data/com.roblox.client/cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db

Filesize
16KB

MD5
62ad4a05cbdca7f47b3206b7dbda487f

SHA1
4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

SHA256
18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

SHA512
0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db

Filesize
16KB

MD5
14394feccd8c496bcb4a4e7a57beab0c

SHA1
a4f67c2bc234e64132669e74b066f1375b4c0973

SHA256
112043edf6ed6de0ae5ac206566719d56044ef85007f4ff61351e05ee89eff8e

SHA512
8f8d77ed334ba68e9048685638aed391e21290ca8e0dcdca619583131e607547a22455ccb4b5e969f41bc4b1e4e1d917f61afd3178d96358d189dea124e737e6

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
67eb1ac47e93a79c5c4acc27eccc85b3

SHA1
6d7668da62f6b55142d1e7928a1975b8aa62c19a

SHA256
0b98ea2c78a810212c25e629b13ec3b11eef48e988928dd880d32375a42122d9

SHA512
727550bffaf5195106aa4d169f1309c2210beb69e619160b937dad9a8fc268c8c383027a2a1fc300a9e50f8253e80add6c7c3606b65c60e791c60be35224864e

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c12a345f4f246813351fb6aa195e335f

SHA1
6e5bf2e1206346ecda5542ccbea02dbecb0afc3d

SHA256
27febe4ab488cbb27d551581c712589c07da960eff4f757e7a5a703c72cb09b4

SHA512
b4b977fc60df835d4a043a5cb139b145052d3d537d3447b6051b1db1c5b2f1883b84f5f983321a7b45fd3f9e69222e00db34d0b6f35aa49a2f45712dccbac27e

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
9c3c6ca710cd05e3e9a1f049a4784bf3

SHA1
bd5d3a1a831d10302480a77f0854e15ab287a7bd

SHA256
dd7c51dd85d67f7498cd03672b451ddc98b7b5d10c6cb74fc83d0ede00a7103b

SHA512
9088c73a351325d3eb781bec549dbb2d10640c3decb09b09f6d469022e9b2628127a797eb361280a7a1644378cabcbb63639eb8a7c301c12c9f9b19c0eb30549

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
2f85eb0871d5d59899812cba566b1b6c

SHA1
559895dfe737c38ce0536d6e6142aa075a0e4967

SHA256
37a640cd503c4657cbe2040f342007bbd533dbe13bc82d33c2d1fe199918b873

SHA512
c8233dbd78ff15fcd636fd9a1ebea4557973c90c56ba6167927dd62daec8f8308372e0058b8c25adddda241d24c827b66a9c30d8d8dc6f6cdaada9efdf4412b8

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
8e59b316431755d350c8542414e9799b

SHA1
81653e2959597135aacd606ea1e39e321c5941df

SHA256
495a737a40601c4eb2c419c74fe4838f27f0722190a8681277429bee277a814a

SHA512
27ae3cdef0c9b820b73e3745a177f74207e12aaf378b4c67b1f1aed82b5e4724473028f728bc688abf55fab93eedeaa0905a04afc7c35ce21d497074e07d27db

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
820713102ae9d5f0d5067afc8d0eec10

SHA1
2a64fe148955598799fc41fa595a5b88e6c9a33f

SHA256
9bf31bd1aafa2dbd4d3e34b284dba71f93fc8e15f430774efa139d8d99fa6a29

SHA512
0557bbecc0afcdf7604b6a2eada1069179831ad6552944097f7e98c23deaeca200171a747f7b75c44dbfc3ffac85074d3c911bdd7cdf89d62fe1e8eab3e46081

Download Submit
/data/data/com.roblox.client/files/PersistedInstallation4960353250795138027tmp

Filesize
79B

MD5
243c7f421e0ec68e7b14e874cadf2a05

SHA1
f14bbbdb1d671a4f735d3b5650e226184efdd6cb

SHA256
056c9f8c099815622910f194b1d20e62c0e6d7b589afe2d118daa484abbfa402

SHA512
bb5529847d4e3449a686acd2ed96f68a2af5b2e00710351f21fceca8691a1e0326c753d531a69ee3393f5665f28cd09b271b68658c5a315f1a4d650f6feeebbd

Download Submit
/data/data/com.roblox.client/files/PersistedInstallation8443076283373902342tmp

Filesize
559B

MD5
f86f2f1a5e6b9d6b68020578b5704173

SHA1
9f30f0d7bb932c6813425fda5738c7bea43df6c9

SHA256
eb17937e118bbff820c3f42532d0e3184a09a6d03db80e434f111d7631c1fbb3

SHA512
43e471ff0b891cf5962d529dce2bd25123221f5eb427298e0eb4a0fcd84fd81eb4e43f11c637bad8440c319e0aefe4fe0d8a017251df28497ce3602b4f426e39

Download Submit
/data/data/com.roblox.client/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
f2daf665803d632a450b6bd5b8431a28

SHA1
70b9539c6c299ae7fb3cc50241012f9fa6bad37f

SHA256
777a6e14ce3a3630b8398974c5316b5ae801ba5cb230eba9bbd6eb86e20ae80b

SHA512
4d29ed86078837b8eafeb0d5b6329348ca8a87f080d39b82742ca890de57c1922c5f6460ccf94a9c1ed57dde65807bb9896ea2e39198ae2fc2ad199f741a3f99

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads