Analysis

  • max time kernel
    599s
  • max time network
    604s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    08-01-2025 07:49

General

  • Target

    Roblox crack cheat 1.3.apk

  • Size

    785KB

  • MD5

    966f04bef5ffdafc41cba883dbb88ad9

  • SHA1

    6b035453d4e981fbdbfa851cb7bb3e109f5f3638

  • SHA256

    93d402cf38f8fa4085ed8f482b6bcad66293967a5a89aeff693a96cd517f38a1

  • SHA512

    b4ad48543b417040dc43277341a4ea94710864f59c5540ec3da683e9b03fcb81d91dda76356f896fff5ac78e45365fcc4d3728f2e770fad60f9b2dbd53822eeb

  • SSDEEP

    12288:xo3Ca1a8LdeahgRCfvPMQ05WmpYshXZPbGwidNpgdl+:xVa1a6e/Iv0Q05WmD9idNpF

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5060

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/systeminformation.android.app/config08-01-2025.log

    Filesize

    39B

    MD5

    9222be395da1d2cd3f6dc10388318ed6

    SHA1

    0aec61b68cb5c446522672622b971ee4088cc26e

    SHA256

    60fd02b89917c741595ee02c1f9a51af5d1f1cd107c0251799e39c3c5afafbd9

    SHA512

    6f06ad5089edb9de56761afbc0652ea847070ee686f88cad33ff0e57a435cf51cbdbd9d33af87d53b694b89dedbfcb40e8e3636a64e8305897cf228f9da4171e