e1b62802b018d8e7c6c9e4e046fcfcf330da838bc9d6b19d430f5d3191a69ccd

Analysis

max time kernel
7s
max time network
53s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
17/01/2025, 14:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Roblox Arceus X NEO 1.4.9.apk
Size 172.9MB
Sample250117-rn8tfaskbj
SHA256 e1b62802b018d8e7c6c9e4e046fcfcf330da838bc9d6b19d430f5d3191a69ccd
MD5 5e1de3d4b7fd03d5ea388cffe2c4c167
SHA1 c4d0bdd446ff7564af2eb54baf68aeaa225711cd
SHA512 52d9bd12c03b2aa0184eccd656d7c4e1069467dfd839f1a08fc174944b2c546665d3d3d5b358a89dbb000c49f924e6e90166731aefd1395b810fd389b8f885ff
SSDEEP 3145728:6EqQst2if6LvZ1TcNDsKLHlXLTlteuJkM4hiuHskSXECzkkXr9Dy/ayn:6EqQswif6LzTc3LFvLZW7hiu+7Xr9+SS
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.roblox.client

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.roblox.client

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.roblox.client

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.roblox.client

com.roblox.client
1⤵
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4420

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0de3774d53f29efb27fa09a940a0ec5f.0.tmp

Path /data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.0.tmp
Size 7KB
SHA256 9c3b06540f328bdd0906de40ad11cbabe50f9d236abe7691876e13b156654191
MD5 060547fd61f86b1607cbd079ea979e00
SHA1 f5a472e0627addd8198ef1f19aa7ff1ef4b2e999
SHA512 d0704a988a3944aa7c950aa22753b7f175f6415cff78ed94f2eb242217ad890d607b080c69cf8b1800a1c3e0c9a75d4ff200358f3697a15b6c1bb0d018e5f041
SSDEEP 192:NXKgvn/wiXK7jd6UqYr4mUsVBv11NmIUyR9wAL5L/ivZ:Igv/wi67RFqYr3Usv/NVUyRqAFj4
MD5 SHA1 SHA512 SSDEEP

Submit Download

0de3774d53f29efb27fa09a940a0ec5f.1.tmp

Path /data/data/com.roblox.client/cache/0de3774d53f29efb27fa09a940a0ec5f.1.tmp
Size 194KB
SHA256 839f08420cfd1f94794dfd6a3e6185db28fb2cb51e6299bc299a00a776e311cc
MD5 5811e539b33ad6456cf53ae3ecb876ef
SHA1 e0022b12e95c104c8b9d6f190eae005b68e8d410
SHA512 d671d5ecf313d215ec857f734c8f483065fa9f81bd18683dadf619f970fc71ff7fcceab0cc56c356554cc43d7eefb59d718ece5ec7042f06328eb0208262917f
SSDEEP 6144:BDOG4T4wLzuXLA3112tBvsIrQNmK7KqJw:UGq4aDeEIrQNmJb
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal

Path /data/data/com.roblox.client/cache/journal
Size 126B
SHA256 a6eeadd17e5d26915c2ccf9732ef05c1861ae692abd0945e730eec99dede39ab
MD5 4a82cc28db51e75142f3b848aa1a5ae3
SHA1 a369063d9bfa769d20450ca7921277f2315f1262
SHA512 a3f5c007a7f181fc917fd6b57ef17b84316f920e33de090468f2afd63f6857956f18c0fcac95b19875d43b7fda55830aafac938b6210e0cf53f32cefcd8f2780
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/data/com.roblox.client/cache/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 7dbb85042896755dfa0aa79fe1d56c7b2999063657d401a615abb9841b30d40b
MD5 a39e05cc1d1eac3bbf4261ef0cae30f5
SHA1 ca6bebc6b820ff6e082e31eb241520f156e26f94
SHA512 11a21e7b6c9f0b7fe9957876b70a9c2a8cc6a360f3fc0423b8908b872754267cade7c0e29c0beea30c469002397490ab3203aacbf027b67410d6c284912f2339
SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6kp:TLiEx9zmzrfRmBEyPbP/P+/0Fl6k3gi7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 b1001c03bc8e9d95d48c21fa211a7b00ad74f24e688aeced28bbe536116f10c5
MD5 f9b132cfd02661183af2ec39c56fa24d
SHA1 b8e772d6508db408d969e3ed665f8625d934f91f
SHA512 26c65560d49530226cf0edfd3868ebcfab66023c92f3b32a614b4ad0abaaf1d0ad4ac034a3c37b91db672575c6157d4977c6370ad8bb66881c12bb0843dfade3
SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFl+3l/+/0Fl6k3gi7:TLvpmzr0GSP/h1499Fy/lFTwK
MD5 SHA1 SHA512 SSDEEP

Submit Download