5f8680ae544ef0a4b9bb26cf56a75a74766ac914dae98721477955477812cd53

Analysis

max time kernel
7s
max time network
164s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
13/06/2024, 15:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Vega_X.apk
Size

178.3MB
MD5

e7a9f6f71846f66d5fc6820d63dbcfb5
SHA1

644771821dbacb738c4ad0ef84e544ec8c62f5f1
SHA256

5f8680ae544ef0a4b9bb26cf56a75a74766ac914dae98721477955477812cd53
SHA512

d240599e465c8e2e34254351661193eece454d13eae11e3f6ffca0b4cd8fe5462698e1555782fdec6646195bcbdc4405031679a72f2d35b6952634d86eb51ecc
SSDEEP

3145728:tMBVqORYBIRG91bmPkurSyDBktN8IisLj5RFKPY6njKvRAniwuGFAnb69yuuOGX:tM3qZD91bmFAisLsw6jKvRdwuf+oO0

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.roblox.client

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.roblox.client

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.roblox.client

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.roblox.client

com.roblox.client
1⤵
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4172

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.0.tmp

Filesize
7KB

MD5
3d94509345e3864f3ced624de3c93889

SHA1
1c8f7ce28dfe41959e51e46277d3041052fb08c3

SHA256
12c3294a160fbb98c423f3c5b066780c31dae56233d68dde4b750aa6bfbd39a0

SHA512
de0beeb6f392c9c9e5d90d776ce27fa26c4dd21d196cd1620aefef91292e17c5d609b929f1c537fa993dfb8410b5cb6295f1c140a83b2453a36ef81db5fa616d

Download Submit
/data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.1.tmp

Filesize
216KB

MD5
ea805f25505aa0c71a7cfd1d0d435203

SHA1
73589a3acf0bee94828cbc74b2c968fb969dc78a

SHA256
eaee1ec5cc94b158787e68c44a675ca842db85d4a85e29d0f378d4812cbfeb49

SHA512
5e049ca8dd13997d73ff828f4aca62a1297af75a4dfca200f6963205612772aa17ea7528d50d0de55185c6e106b170ffa13bf934e4621f56d65134fa0ee2533f

Download Submit
/data/data/com.roblox.client/cache/journal

Filesize
126B

MD5
4baeafcc8e7430507dc2dc3400db7e93

SHA1
198ab86c2643d74255bedd14fe4fe7dd35192191

SHA256
1863e4ab323b5c3a3a1625824f96aebb728ebda4613a2c632127c717468e6c56

SHA512
fd3d86b14086a5d4bb15b7bb6b54a4ab29f540186c2a2ddeb7553d424eaf7cad82e19b25fbe66c22d1a2f3269ce5915148f2e46ba9496fef491396383623528f

Download Submit
/data/data/com.roblox.client/cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
57de2cb4c58a0eacafcbeb3577ad9c5a

SHA1
8b6ab3bb88b5a6e58545100084b40e5e06827e45

SHA256
fe66e6eb680e5a53c1c17f6e8749322282d0cecbc243eaec76f9423ea7d9f3b0

SHA512
686570d43456f4ec62c852c27c3f1929b0488d7f2c836f77dbbb34a7f79a4ec34aa4cc8d90a84d682621535a33a4ac8608245b96c9d90c78226d90f7f85730e7

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
773d75359c1a96bed2729fbbb1d07858

SHA1
a383e13c715e978d1a9e0f5b64d59555973106d6

SHA256
c8f634c41bd6742ef46c0f95f5999d90be304c663c9ff04b65c305867a0067b0

SHA512
f1aca9772afd03736ebcac0f1d53932b93df71e51159f70bfe6602d877ac11b6d24fd5df6989da0035b0077242a2ab2e1b2cba36fbe48a3bc20db0e13385f9a0

Download Submit
/data/data/com.roblox.client/files/PersistedInstallation6832891315698523449tmp

Filesize
562B

MD5
60c49568978346253d1cc456dfc848c4

SHA1
60c1b1db2e2faf13fe4507b65e93d65a47b04ff3

SHA256
c8a62dcce27dbd5c60b46e444d9bad010abc2bd51cf3def2b54ce74e877785cb

SHA512
a502dc9de165e69df15786bbc08ad3b896a4646db52df8889fe19f9aff3fcfdfff1c38f19d7fb55fb43bf8c44ebcebd0e4d98cad4a7119fc90c47a4e5ecf1b5d

Download Submit
/data/data/com.roblox.client/files/PersistedInstallation8848661033768919442tmp

Filesize
79B

MD5
283a07391cd7d49577651898b132dbb7

SHA1
6f3e0171011f162d93e14678eaa7acb721b90f6f

SHA256
0cb9c18c17fa6df4bd316c50e046794b85b117de0cab66ef56672adddf6499fe

SHA512
29140a52f374d3e6a64caceeba04c73472ae1a5d69e66fe6793c29dcf0bcaae9fc92962e19a2934453bacb87b39481260fb43a776ef3ba2fffb327e87214a0fc

Download Submit
/data/data/com.roblox.client/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
9bf1a0f7ef314539728dde4f3bb116ae

SHA1
b206980466b5013328a57229b8c8a034945d5169

SHA256
6492df3ed83ad2d1db152a483a72138eaaf2948e1952e1bd5bc31d8a8a46b643

SHA512
c4cc37d552ca4f5558a2b011130d688252bfa15e7f3849efe1d9254266feb6f66cfe72f895bd72857b66aa242afc391962903a9552bd76ca4997212dbac238b6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads