6be097f2c3f4184c12c5df153d34d0d0678db8b282574bbed3bfb68b677e075c

Analysis

max time kernel
5s
max time network
114s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25/07/2024, 16:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Fluxus_V2.634_64BIT_32BIT_Fluxus.mobi.apk
Size

185.2MB
MD5

eb4ba45302b3cbfabd4a539737dcc4e4
SHA1

8cc30561877bb04785d7a3830475a13f0e3f2bc0
SHA256

6be097f2c3f4184c12c5df153d34d0d0678db8b282574bbed3bfb68b677e075c
SHA512

d705fb08969bb108927e93e3a4374e0d39e96319fcefeb66ec9748786acb997850d1fa0badac327011cefd4b141b9e4abd6f85e9807832860da09a4b2ef5339e
SSDEEP

3145728:E6r95njYYfnpc09bGKR8vReA7z8YTMI2DFOi44SInsjmqSFc9SL/x8xbxpzH6flZ:E6xpYlIGKCvRea/4XD0457qSy9t/cLTn

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.roblox.client

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.roblox.client

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.roblox.client

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.roblox.client

com.roblox.client
1⤵
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4251

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.0.tmp

Filesize
7KB

MD5
c3d5c59810fb3b5dba4f02b12b07e6a5

SHA1
2b07d02d39253617e68890cbb4ae7f4d14888b57

SHA256
bd909404b2a9c5fb1cb5d6b33f36cd536d2d673224376eebd72987040f1f7199

SHA512
afea623fff569f4738717317c98b880f64cdd340bc6da678fc00218cb995d2919ece5c4e1fac641da3c1a6062681808cc609186d4857db568231d94a59476d49

Download Submit
/data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.1.tmp

Filesize
227KB

MD5
5a864112e1c2389b6f33553cf4778ced

SHA1
e426d605a96061f58e0c1cb4fda3dd8adccfe83d

SHA256
cb07729bfdc74b42f9e25ab2562e416212ca554748ba48e922d501415a756d02

SHA512
a9f5cb75b7d088bc514fe54329a60279ae5e339d916026a005053d2923864e2976bf920ed8a253a66d7d2ece2734eb6bb321c094ae0bd94d38fcc319c953872f

Download Submit
/data/data/com.roblox.client/cache/journal

Filesize
126B

MD5
fa653ce1f9e681e10da7f67288b5ab82

SHA1
87c2eece546a8788c4f37a43e441ac6167a84fb7

SHA256
37bf6bb9a27d64672e01cf733d92a93d2b23968b75f6e6fac5413d0b0ba298b5

SHA512
f2b7ba70877ef080a16ed3b2b3de9e82d28a41c71aaf640b531a78a93375fe3df4fe3aa2e3a58ca289bcc2bb42754d4b51c13d774693bb75712c5658b988f03d

Download Submit
/data/data/com.roblox.client/cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db

Filesize
16KB

MD5
25f3602b9fbacf23dcf833462976050f

SHA1
bf74ef684cbb40a7ae533d4768b8cfc3be2c6bd3

SHA256
f641b8019b59922b74c45c2546f66384975776e6b4d7aced2f215bea2748d2fa

SHA512
7b98108e1311e7216f89d8b7ad8d399694330835152a9b7e3b249d897aa00d3a1ee09ac4c8279cf1811247a13990d1153fd1bd6b39fd44fba4cdfa81e0a7a13a

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a031a596d0f94c2ac9983bebd6d39663

SHA1
ef505ccb4e89ecb28cd7f0ecf7b92bb897b51cd2

SHA256
f6366f3dbacb7d16b30476f711f776a00cad88cfaedf530e81e03c1d909643cb

SHA512
33c8b331b802d848a0143539607dbac84d1929fc919088a33112081f7c8859f546ad0e132bd3027c0977e378f81ad37654e3d345c30dcc2472035297358ff0ff

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
55da7c9681f4ca19fa5164de6ae8174b

SHA1
1084db11de5378b19490984094452c1ef006b629

SHA256
287ca91a5a63e59ed93fa90418a8fa661e51e62b22175ba672de841ce5783e19

SHA512
0c7b581cb97469183054ae2f4083ecd60c3b1c1099f88aa2c3b4d14170003e37e49736b3ba1113e5b65ed8bcaae5b7657d8846ebfee275027256d8b21a72d39d

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
ee695bfa8034c66afb9dc2bff69fbb1c

SHA1
4277aee4d34b11d64e26fd46994e4f8294c725c7

SHA256
7a693d281642f82d7cc4e4b2ce98c4a9a06980e8b3f171b688d5b847a7d8207f

SHA512
cc751bcf96e8e965fba4b9a312d4938b3de9302a7dede3a9752a9f9125812b945757f7c5de46117c5b7a95c11227097ed3221155406740fe4d297728db00aafb

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
da10f9c95c023aef774a8e8ab2f393c3

SHA1
f717aa6ea5ded7a73aebbd69fe420e0b3379e034

SHA256
0ab9014135a711545a81bf979ca269a03fa3c0a8654608f216cf257e7a8de1cf

SHA512
f8e27ae119a80de7d7c1e5e5e3c2f01cbcd4b76b41577bb92e42e83f7134110de15814b9a0813db88d942a74b08771ebe7cd6b8dfd944b376a2c274dd2bc0410

Download Submit
/data/data/com.roblox.client/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1a22d85c42942982e6f36be287f6a61e

SHA1
7d124caf2bb4f51afad458d37fa62e88ab28a706

SHA256
48a9ef99d389a585d35747f28e115e1fdf43987fbf2fbec983720fa4eff67ad0

SHA512
9d739cc4e9bf8ddcf4c73dece570cb3697013219aeef592d3247879ba7bf8eb51086a6122f585fbe6d27c49823a2111b1166cf3b9df2b8baa2204e5025e614a4

Download Submit
/data/data/com.roblox.client/files/PersistedInstallation4585829215272224922tmp

Filesize
79B

MD5
6b6556bd095484720c4480147fd47599

SHA1
18ce0e49de8a5b3b2b2e0fe02149426fe24e66dc

SHA256
b16cea56695d24f76569739fef499bb83971aa53a2a81dcf7908ff140b615539

SHA512
60b022625be00a65eb22ec1874e49fe90146bd9ba3000b59612636b8cb7c7419d3ff0c44dbddea4192b2094b954fff8eef56c77c547a561daca7293b3e39945f

Download Submit
/data/data/com.roblox.client/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
5b86aa64f946b41dcd4df0cbb9591277

SHA1
6417af9b7ffbfa60fe78d43351842b8e8193cda8

SHA256
e113a5df9bbe6993ba1a82d7e7454b27b546948ce2f3fff6d82a310b20f33ffe

SHA512
a529326c0a4cbf45017cc9587aff2282a4fe3dcd2de39178bce9d57aef63154200e96fa954bd0bd037f1a56a54ef37c62f56345df6b3a69f7b54e401030649ea

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads