Analysis

  • max time kernel
    599s
  • max time network
    587s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    08-01-2025 07:49

General

  • Target

    Roblox crack cheat 1.3.apk

  • Size

    785KB

  • MD5

    966f04bef5ffdafc41cba883dbb88ad9

  • SHA1

    6b035453d4e981fbdbfa851cb7bb3e109f5f3638

  • SHA256

    93d402cf38f8fa4085ed8f482b6bcad66293967a5a89aeff693a96cd517f38a1

  • SHA512

    b4ad48543b417040dc43277341a4ea94710864f59c5540ec3da683e9b03fcb81d91dda76356f896fff5ac78e45365fcc4d3728f2e770fad60f9b2dbd53822eeb

  • SSDEEP

    12288:xo3Ca1a8LdeahgRCfvPMQ05WmpYshXZPbGwidNpgdl+:xVa1a6e/Iv0Q05WmD9idNpF

Malware Config

Signatures

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Tries to add a device administrator.
    PID:4513

Network

  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    172.217.29.174
  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.200.40
  • 142.250.187.234:443
    tls, https
    1.3kB
    40 B
    1
    1
  • 142.250.187.234:443
    tls, https
    532 B
    40 B
    1
    1
  • 142.250.187.206:443
    tls, https
    1.5kB
    40 B
    1
    1
  • 142.250.187.206:443
    tls, https
    1.5kB
    40 B
    1
    1
  • 142.250.187.228:443
    tls, https
    847 B
    40 B
    2
    1
  • 142.250.187.228:443
    www.google.com
    tls
    11.2kB
    10.1kB
    31
    38
  • 172.217.29.174:443
    android.apis.google.com
    tls
    5.6kB
    8.8kB
    23
    24
  • 142.250.200.40:443
    ssl.google-analytics.com
    tls
    1.5kB
    6.4kB
    11
    11
  • 142.250.200.2:443
    tls
    135 B
    40 B
    2
    1
  • 142.250.187.227:443
    tls
    135 B
    40 B
    2
    1
  • 142.250.180.14:443
    520 B
    10
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    android.apis.google.com
    dns
    138 B
    2

    DNS Request

    android.apis.google.com

    DNS Request

    android.apis.google.com

  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    140 B
    2

    DNS Request

    ssl.google-analytics.com

    DNS Request

    ssl.google-analytics.com

  • 1.1.1.1:53
    android.apis.google.com
    dns
    138 B
    69 B
    2
    1

    DNS Request

    android.apis.google.com

    DNS Request

    android.apis.google.com

  • 1.1.1.1:53
    android.apis.google.com
    dns
    138 B
    178 B
    2
    2

    DNS Request

    android.apis.google.com

    DNS Request

    android.apis.google.com

    DNS Response

    172.217.29.174

  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.200.40

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/systeminformation.android.app/config08-01-2025.log

    Filesize

    39B

    MD5

    9222be395da1d2cd3f6dc10388318ed6

    SHA1

    0aec61b68cb5c446522672622b971ee4088cc26e

    SHA256

    60fd02b89917c741595ee02c1f9a51af5d1f1cd107c0251799e39c3c5afafbd9

    SHA512

    6f06ad5089edb9de56761afbc0652ea847070ee686f88cad33ff0e57a435cf51cbdbd9d33af87d53b694b89dedbfcb40e8e3636a64e8305897cf228f9da4171e

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.