353745675adcfa601cb9a5022cb073585100985b124126321f22050aad6e2943

Analysis

max time kernel
5s
max time network
158s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13/06/2024, 03:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HYDROGEN_ Latest.hydrogenexec.com (2).apk
Size 183.3MB
Sample240613-eb8xfstble
SHA256 353745675adcfa601cb9a5022cb073585100985b124126321f22050aad6e2943
MD5 db0b0e5eb345facc657dd38e95995545
SHA1 6bc1d177656e76702734bd3b886156964adba161
SHA512 ea5e027d073a41c0d264e84d42629b6e1aadf95a8194e4022899b7cd21a030b199426846d619bc418e32cc811ef746bc532c6b8ed51c6368cf837e7517a14198
SSDEEP 3145728:zjucD6r95njYYfnpc09bGKR8vReA7z8YTMI2DFOi44SSecymKgU8gvgBO6hJ1leo:zacD6xpYlIGKCvRea/4XD04jecyaUhYF
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.roblox.client

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.roblox.client

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.roblox.client

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.roblox.client

com.roblox.client
1⤵
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4328

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0de3774d53f29efb27fa09a940a0ec5f.0.tmp

Path /data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.0.tmp
Size 5KB
SHA256 d71f9dffd08da99257b6e41787caca17067f4e63cee5f780f7084a6a55e12762
MD5 ff8f5e9cb1d50540f7953a6e8d3a427c
SHA1 1238f71f9405c3565649c8b27a9bf6aad2d749e3
SHA512 a5f3db66bd3a8dc32ffe881f001a87b60303123db87d065cc3a957c196178ef7b44a1dabc02e1ccf6a4702fc5b6b74b522eeea858dfefc05adfd57a5a192d85c
SSDEEP 96:NXKNBpnKiNQ68KeGysIjP1moGSdi7v2QQPdVKMWBGfWz5RFEGpP61aBOgYp:NXKpnKiuIeGujNmFEi7u+eyRtphgp
MD5 SHA1 SHA512 SSDEEP

Submit Download

0de3774d53f29efb27fa09a940a0ec5f.1.tmp

Path /data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.1.tmp
Size 216KB
SHA256 eaee1ec5cc94b158787e68c44a675ca842db85d4a85e29d0f378d4812cbfeb49
MD5 ea805f25505aa0c71a7cfd1d0d435203
SHA1 73589a3acf0bee94828cbc74b2c968fb969dc78a
SHA512 5e049ca8dd13997d73ff828f4aca62a1297af75a4dfca200f6963205612772aa17ea7528d50d0de55185c6e106b170ffa13bf934e4621f56d65134fa0ee2533f
SSDEEP 6144:QQ3OxGmkuWEO2easIb3wxBPrxmOrliRU2Mc:QqMX3gIbsPrxmOrdnc
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal

Path /data/data/com.roblox.client/cache/journal
Size 126B
SHA256 2ed44fad88d60be15ef467db1d14e68caabee69e1a4f4c1815986052e13bbeab
MD5 34bb44bc47dcc29f5766b72950e28859
SHA1 7bd3cb5d15c3c05bc74ab9bcdd03c9f5ca520f00
SHA512 5d6b7053757a62315720978eaa7b599e6124819ec3745e42454cd0e237f60a79d03e7190c739ed219281c8ba4fe644793576f9a4a5e7b4709fa935fd7d905a65
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/data/com.roblox.client/cache/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 edb034495055849e2c9d4935741f57bf64ee1dd8a1924f0fa5688197611d0468
MD5 ff6e8834cd3e36793e12765913a75423
SHA1 92d97ef34a73254d2aff370adf41383a5f2cbb37
SHA512 e406b354aafd832ecedd7a8b48b93320f208e7146e175086dfc52357c2ddfbace87792c3fd69320f931d51cae214a6732a8f78a4f979794fc428e5b58e671786
SSDEEP 3:qqb/NjghzY+/lzyliMlTXm/lwsDtoRzMlklKllgIn:LCM+/lulvl6tP2RQlrf
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 67b5808ae3b522833a5fce6797b5ea1539cc616a684c8169a04b616f113f968a
MD5 e24e871e80ee0a545d026b3e168b9646
SHA1 f9c9e7d06e87b1028746d88e65102b2021f67884
SHA512 fa457656d2e6ca9e3c971700884ea1112d0b78a1acdc9a8af1c3915e9ac8179aaec8d152d3b24979c0984c2f4dd885ae998126c624997c7456ce78d31e20c5de
SSDEEP 6:rLP/gEhV71m/9blDqlrElvl+5Qlr20CM+/lulvl6tP2RQlrf:rr/gW49blqYFlLT+/0Fl6x7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 1a26548d28807df789df303478c6f106e98a3ff8b1d8ee5b4b4a424a76ecaed6
MD5 3cf5fcee9283e9bba20eaed6612b0b8a
SHA1 ee5d4c4c60614c81126953efdebc048844626382
SHA512 9da6b1b8a074d6e4a0a0ff702630d1452c48ce86e5ab969e6d90c43a21445b3cf1358e1cb29000e05b18964571cd8b66bf7cfc8fda01a139e08795e499feec33
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-shm

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-wal
Size 36KB
SHA256 1c5d4ce2b0e4bf1a046124a1d670cdac010b3446157d293c6897c83fb04a93a9
MD5 cc043782105668e0a4c785e48eecad8d
SHA1 73c53abb51e6aae3dae82e9b9ff0ed9401ee0882
SHA512 a92742650f4ab9181bcd481c029fe500a3260b05ef74d0aea6fc8a85803a8dbb2f3355f4c13452e853c9e9a9a2bba4de5649caf0958884dca194a0eed986ab75
SSDEEP 48:uGjXzNSP/zErKJVDAz6SP/EGqArSP/zm0m:uGjj0P7ErsVDQ/PMhP7m0m
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-wal
Size 4KB
SHA256 9f575965d16a6d40d0d4c341a76002b1b8d04a465d3688109641fc9223cb0784
MD5 ef2b796c642c71c36bc29eff762ce8b9
SHA1 deda034f2fdf2bb788b2b6a409025fa59efbab29
SHA512 1a628cdb85357eac8a80d869d742224c41b786b5404293bdb1b94ab0b2623f54c312fd6ecc32c6ea87f303743c3237a489b1804a6f02fb41759160d2e557904b
SSDEEP 3:OlH/lwh17x0zl7E3BlnM/NjghzY+/lzyliMlTXm/lwsDtoRzMlklKllgIn:Kihpua3BuCM+/lulvl6tP2RQlrf
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-wal
Size 4KB
SHA256 250092e21b0e5d47c03e77bbef77fef14229db094a3eb45592696805867c5616
MD5 138af97e71cb208cdcb9d93bb34183fe
SHA1 e0a8125864cec57709abac1c5acbde07ec5077d1
SHA512 81ca5e8c1106508461891c418eb6786ee47435dc9f958c4e4db6758d4527c2b15248285f974894e03d99c6656eb02500b13c2eccb40eee54f1aa1c80634c60e4
SSDEEP 6:KYE+fanMHplIP/gEhV71m/9blDqlrElvl+5Qlr20CM+/lulvl6tP2RQlrf:KYEuJg/gW49blqYFlLT+/0Fl6x7
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation2433892760038439181tmp

Path /data/data/com.roblox.client/files/PersistedInstallation2433892760038439181tmp
Size 562B
SHA256 d72ba98c35a2220d9fd483e69144479b42912a81b0687372450b8564f3bd667b
MD5 5d3dd413b7fd9b990706a0cacc06498b
SHA1 6131d2b9670ce487e6e10204bb722cc7343d2c83
SHA512 6cd3aac1ed935fcca8331e2f63479f179e529f6c9616697bb325c3c42ab960041d464bb2e34a1c9eda50e9ed14f54916ff1f6c3630a5146d5ab1b1f053766743
MD5 SHA1 SHA512

Submit Download

PersistedInstallation5301205061816071286tmp

Path /data/data/com.roblox.client/files/PersistedInstallation5301205061816071286tmp
Size 79B
SHA256 24ea66175d466686ca90215a129892cc06f5fc0777a57dbb5683ff5abdd47ecb
MD5 fb40d6c13464000471513c4cbc0b5860
SHA1 883043b7fd8d42fcbe378882cfa897bd3e314e8d
SHA512 f1a8eab36cb8b115fe65134562291d3d2a99cfcd56d9224557f66d751a518bcef4ccef738777da4b261010bc5cfa73e8963050320e0ce4e691e0899b1c31cf53
MD5 SHA1 SHA512

Submit Download

com.google.InstanceId.properties

Path /data/data/com.roblox.client/no_backup/com.google.InstanceId.properties
Size 63B
SHA256 205f90db2c63d950702849263796b8379dd4ed64cce8fe25d209783a4be58740
MD5 c10dbe363e470be36144372d92da9f60
SHA1 3ddda34e20627bfbc8ce7bf3c836fc425398d16f
SHA512 c4065a7c9c6f2bbf968b50b05fe213994d858f8932378a70c7252e04bd256c9dea512cebc44bd1cbb5cefc66f607b437bfa142bdf6a1f68993eff88f98f9be8a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads