delta_2[.]0_new[.]apk

General

Target
delta_2.0_new.apk
Size 174.7MB
Sample240613-ped7csscrr
SHA256 67e5adfc26a8027fc304cd00d65fa8e9fd8c0642b07ec6ca655ccc9b82ed7f06
MD5 468230a053aa7171160f6f83aca93da7
SHA1 f1228bbcb014803a2b568cb594965679ef139415
SHA512 2f8e09167e1b3e6be9dc079c50ffe63ad93e5215377ff892358eb85d1d2146b653ce5d69b8ecd22b4d6ec064594953fb22ecdd3ddd0eedd0ec7c0894150594c5
SSDEEP 3145728:o68EqFjodXtSm6ayAjsj3Ro9LBwGWn8NK4tBKtNa01PJFW8jp+XcycQwsv:HfqBsvjstopBwX8A48Nx1PnW6pWc8wu
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

delta_2.0_new.apk

.apk 174.7MB

delta_2.0_new.apk

SHA256 67e5adfc26a8027fc304cd00d65fa8e9fd8c0642b07ec6ca655ccc9b82ed7f06
MD5 468230a053aa7171160f6f83aca93da7
SHA1 f1228bbcb014803a2b568cb594965679ef139415
SHA512 2f8e09167e1b3e6be9dc079c50ffe63ad93e5215377ff892358eb85d1d2146b653ce5d69b8ecd22b4d6ec064594953fb22ecdd3ddd0eedd0ec7c0894150594c5
SSDEEP 3145728:o68EqFjodXtSm6ayAjsj3Ro9LBwGWn8NK4tBKtNa01PJFW8jp+XcycQwsv:HfqBsvjstopBwX8A48Nx1PnW6pWc8wu
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

com.roblox.client

Android Permissions

delta_2.0_new.apk

Permissions

android.permission.BLUETOOTH

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

com.android.vending.BILLING

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_FULL_SCREEN_INTENT

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.gms.permission.AD_ID

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.roblox.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

delta_2.0_new.apk

com.roblox.client.ActivityProtocolLaunch

com.roblox.client.landing.ActivityStartMVP

com.roblox.client.startup.ActivitySplash

com.roblox.client.ActivityNativeMain

com.roblox.client.startup.MainGameActivity

com.roblox.client.RobloxWebActivity

com.roblox.client.NotificationStreamActivity

com.roblox.client.signup.ActivitySignUp

com.roblox.client.login.mvp.ActivityLoginMVP

com.roblox.client.resetpassword.ResetPasswordActivity

com.roblox.client.captcha.ActivityFunCaptcha

com.roblox.client.landing.AboutActivity

com.roblox.client.qrscanner.CustomCaptureActivity

com.roblox.client.IncomingCallActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.android.billingclient.api.ProxyBillingActivity

com.example.hydrogenandroidv3.perms

com.roblox.client.fcm.RbxFcmListenerService

com.roblox.client.fcm.RegistrationIntentService

com.roblox.client.realtime.RealtimeService

com.roblox.client.pushnotification.v2.RealtimeNotificationForegroundService

com.google.firebase.messaging.FirebaseMessagingService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.components.ComponentDiscoveryService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.camera.core.impl.MetadataHolderService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.roblox.client.sms.SMSBroadcastReceiver

com.roblox.client.XAPKUpdateReceiver

com.roblox.client.pushnotification.v2.receiver.Sendr1PushNotificationReceiver

com.roblox.client.pushnotification.notificationreceivers.FriendRequestReceivedNotificationReceiver

com.roblox.client.pushnotification.notificationreceivers.FriendRequestAcceptedNotificationReceiver

com.roblox.client.pushnotification.notificationreceivers.ChatMessageNotificationReceiver

com.roblox.client.pushnotification.v2.SendrChatMessageReplyHandler

com.roblox.client.pushnotification.notificationreceivers.PrivateMessageReceivedNotificationReceiver

com.appsflyer.SingleInstallBroadcastReceiver

com.roblox.client.ShareAppChosenReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.roblox.client.provider.ShellConfigurationContentProvider

com.roblox.client.provider.AppAssetsContentProvider

com.google.mlkit.common.internal.MlKitInitProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

delta_2.0_new.apk