Analysis
- user interaction
yes - max time kernel
3s - max time network
151s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
03/05/2026, 03:42
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Delta-2.718.1110[1].apk
Resource
android-35-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Delta-2.718.1110[1].apk
- Size 174.0MB
- Sample260503-d9tprabs81
- SHA256 054c6bc7c7575e32ba9843bc12cf7d6221b214ba6851b39e015c4b1321b17bab
- MD5 6d80524895087c344b97f52ad5b91849
- SHA1 5d1e8ef7f2487964489e8d3f199c792563e6f256
- SHA512 ec5474b98a09007a43ebcd2573220cb04c03d0b13d86bf4efea00a2b63113745b2b6d4388c494c9b817c1a42e15be43fb1910ce0e79dd17c056f9bb977a04a09
- SSDEEP 3145728:7slXLTlteufJ/njqpQgi0OnWxx06iyg3AFxoVfK6aTjqkA:72vLZhj6iYNiyCHlKH/c
- TLSH T19E98DF09F2824E23DE6A4B399AB396957734EC5E5B06CBAB300D7174BF773840F815A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.0.tmp
- Size 6KB
- SHA256 9997a0bf1de4a16698c88f43e264b10429248f45805108d34a610787598f9d3e
- MD5 0edc82bc0b214effbfa2914af2ecbba4
- SHA1 99fabd170158f06e1f2a05e23059b0ec80fe1660
- SHA512 1f47e0821ddf4adfd6fb5534a771cd5159a3af6d22375aeaf22413a673cf9b1864339ce76b8a66391e6b1e1338554581362fc5b43d8dfa582b2ea0384bddffb3
- SSDEEP 192:N3gyRWSnAS23JhXy9KHt8+BsRTssg7lbmDAf:m7SAS23fy9KHm+Bsqsg7lbaAf
- TLSH T1C4D15BA30F7230CC1E43EAE2E56F5844A8AEA718EBE584E6D95C3504C9DC6B871B14D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.1.tmp
- Size 19KB
- SHA256 05dd078386ebec60484a87d35461c32e63321807c4a0e4cf083bb999f1c4fda4
- MD5 7b85be1dee4907487b6bcf7458ec239a
- SHA1 d8c18596b537230cb65b6e3006e17cf3921e579e
- SHA512 65d7c0c66d3aebc2587099b7c644151bd2c786cb9c138c66c8d9b4ad1cf49a3cd268eaa3c59248cb5bf14ec962037286eace9dbf470e8b9792f4d727344911d0
- SSDEEP 384:GrQ7G2227S3E1VYjHKa7+Q0uN5Mpwa6YX0RaSW5JzuhtaN4CP9DA:Grgn7S3E16Kae76aTHzitaN4CP9DA
- TLSH T11E92C0809086C43577FBF45D691E9F12D6C10CA468D62CBFA0D8B18BE4AE7F1628DCA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
- MD5 dd9a2fe8f7bc14471ac42c324c607a30
- SHA1 f88c5a77e00aec2c00147b84e0d346cab31804f1
- SHA512 f5edea485e7aec27b231844b38e7741e8cfc64ffca299467c5761093e8e173ffef1ab808db141519cba717fbc2d28265b5cc316e6221f6997433bb3ff0c4e0da
- SSDEEP 6:l9bNFleLIls1uGo9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0Dq3:TLDEuX9F7LzmzsRmBEyPbBvOwVQ
- TLSH T1F172D8CD8F10A206C517033760CAD3950F78551E83779647166408605E52598B451E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 196c046b8baa27fdc20b4e69a4c71fdf1836ec55d7da7da5fb123b9ab791669d
- MD5 76aba9e601606776128bb8976dfd6cf1
- SHA1 b1fc6105a6c7d03952fcf89b6a99c8667f807d62
- SHA512 f7c1daff88d9f31f0ab078bb260508cad0eb0b87021b1334d0b258f979b6f3768b0356fda545c1143bdd303ca56bc01ac4f1c5c8bd9d9c3e18d957201984720a
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f11466690e43c9b24204c3be42063fef9cceda39ce656dcdbeb0e31189177670
- MD5 974d65d158d4ec1e5c47124f8feb3267
- SHA1 9c8a19a476f24683db4354fb185b32386a2b1090
- SHA512 66d712e6416eff4c783d9d520d53dd2c07693325a1a6003f9a9343615817229fb0d79d2b59644e1860ac60dec422db9542526d77951a591999919913934a4b3b
- SSDEEP 6:7+/l9PyFn1Hg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKSJ:7+ttuqLiuWdQoRmBEyPbP
- TLSH T11E02C08D67820813CA3E16F790D483580D90E79CC5B1CB070A710C983C0F4CCECA0D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 d0093a1246c4f04816fadd7b49dbd9ae89154e4f9b99f312fc6c6167b477787b
- MD5 669a4a84450b15cb719e06173a797570
- SHA1 92c58279e946080eaebe0044a44880edd1a255cf
- SHA512 6a9a77ad419e6844330b8e9b98246c2d745d2f307e2f36b78fa993e2fc5ebc7f002b073e7311bf702c10c63f96ef34c6943b4f97b09f19fef206ae943fd4f654
- SSDEEP 6:7+/lzaPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKrn:7+tCqLJdvloRmBEyPbY
- TLSH T174918089A7410913C5195F7BF0D583591D11A7198373CB57155008A47D477CCFC91D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 770b7b0e5966128a81e337a5a9fe4334945ca5972b12ae5a80f2066548feb5a4
- MD5 b71aafbe4d01311ceac738c91005b35d
- SHA1 a9a3fef6dfafd17a8517b2a88e20b6cdeb26c906
- SHA512 25dbf278ab70a55cc1deb34a915514f3cdeefe65398a80cdeb722cee9902efde0054de53f87c8b3a17590687c72906dd19bb6a455483d1fb8f4b6a5e296e4e0c
- SSDEEP 6:7+/l9t8HPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuKMa/Nn:7+tr6qLmqioRmBEyPbeN
- TLSH T1D802128967820D13C51957BB90D983691E50A72983A6CB571AA508687C469CCECA4E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 8d4f1e5fe916dd7a9b5a0b19ccae69e5e0877055520f7b5ce56f2fdbc4e146bf
- MD5 9c4cd4c5f039050d899e742a756ea046
- SHA1 20645c9436dbd2aab375a781bab2efefdc258cac
- SHA512 80981ad29ebe50d41e72e03612b6a9860c554b971b4fa41a0432f061429f75595f7c3b79878824ed3636f6e2de41b36b1c1a88d40b6c31a7ed2a01aece2f5ba9
- SSDEEP 6:7+/lb7g9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK7rn:7+tb7qL8Ef9n9zmzrfRmBEyPbE
- TLSH T12891EB8D9F102603C1370BB3B0CF83521C28631C83779D832BD80430AD030589051F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 1bfd0e02089f49b21877f94c0a098ab5d8a22e5e9040cb8fc69bd20b90f0bb0f
- MD5 0a81cbeb613a2fca650fa8ed44b887f7
- SHA1 ba81da7649e36ef27d15ca1ed7072c2ccd207e0a
- SHA512 662058a98258e0ba66bf6298fae5fecf38e509a6903e554dcde313c94053a269f4b10289d0ee15702983d9f7547fd5dca98bcae6f4f002574efd42757c55d8fa
- SSDEEP 6:7+/l9p2xxrg9bNFlqls1B9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4sm:7+tEhqLwEB9F7LzmzsRmBEyPbD6
- TLSH T1B60220CD8E106613C157537B74CB53555F28551E43B76D531B7404705D53198B051F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation3326295829445484916tmp
- Size 90B
- SHA256 8644adb423d68dc32d759c810574964d557a08795081ed5044292d8c80a084a5
- MD5 13c466cd5db919e6382e61c93d6096e9
- SHA1 d1030065e562cbf74c79d93dc020170784aa4777
- SHA512 e7c03e5811ce5cd12119c1cd7fe5637402aa60de375ad165b4fdaeac8c1a06853d096da7bb001f4dbbaed193d72a2f1c7bef7d998179b0d0c2ab5a49e01a6123
- TLSH T152B01281463141A2CC89F3071C8C91002E941540440E8B590B4CA4D050811E08253BA4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation5355375294390068345tmp
- Size 561B
- SHA256 ca7a74d87ceaaede19e40458350deca3b92622a68ef9d72f170e711623970c02
- MD5 8949555ba5bdec26471773712409c061
- SHA1 acffded8ca92990c027924bf7bedb55de6826440
- SHA512 c622dcea24d1a3f572e91e8d8410171dacd41ed97dea296279fd93f603e6e7f419188f907cd234ad515bb4cdd808548372b173fa07528a9b04798e253a228ca9
- TLSH T196F0E19E23409E29D598E102565C9D49DD4C01BD2FAD51EA3ED54CA499C0495D217F21
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 b3e305ebfc05f43270481eda389d3b5cc7578286c0ec4e23fd6fe4a7b6637e79
- MD5 49548b9ad5081a497ec73eee1a15eda9
- SHA1 3bd84921a970f0c49365daed5e62d7d93e34749b
- SHA512 90330c84e506d241c5e41711ce42acc09a05b8aed65ac42c164ea00baf58fd0caeef4ff77981be34e82827e0f2280905745ab827f9a3eaf723ae9dcad5a671fb
- TLSH T1BAE02610DAA15BF16C7B120E7FA401280F2FB39561BA049931F40184BA0AA94E2C3F1B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 f82d976ab081aedddd8d7a624f93665f7490515525bd2ff16b4e35612606641c
- MD5 133ed14621202fcfeee83ff1d2433f7c
- SHA1 759254f82100e55625459423dec92efab43d5eb1
- SHA512 a965457c358e9a08971a30ccdf49d368d9db2983a1353f6e818801df6f0eb5b43cbc256d4a3128b35f403ee26744ae5c3eb60ccacb21cfe8b09272f601acc5ae
- TLSH T10DE0D810D6A15BB16C7B520EBFA801280F2FB39561BA445925E80144B90A694E5C7B1B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 3896f8b8e03f206ff6279ecf87cbeaed25f7995b93f5fb447fac9fd91a0edaa6
- MD5 e862fe637c8b79b51b481f9240db637a
- SHA1 41e3f3d2a5b1ceae05de911b139275e9d15b6bc5
- SHA512 295c53c21ddbbae2726e72b2c6d6a05350acaf68379004d8a05f6159cabad1a8052ba167ff26fbdcaebb18d7090cc4c1225d4c960854fca996b7e816a0f95f03
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 5c886caa3f3aa27f8041f5026dba86f8b901f2cf7e8ae3a7c8bf6cbab7532eaf
- MD5 75768db946802e5c7d5d29868728d366
- SHA1 021c482784dc5be4071bdb18c34a986407423bd7
- SHA512 dae99947b210066d3a32c62d4318806e1fdd64d00ea88dba7467550d4574d609ca619848e44245553f285344a0342f69d396de62ff4f85c7888fc3ca83145ab1
- SSDEEP 96:YbPrBR+6+OtidjnZRWzzb8/KeKcK+zSgKz+XD86u0ExV:UrnTtidjnfWzzb83zSP+XD86u0ED
- TLSH T181C3648D0F4D2700C4EA54F0D4D51BA17DBE912EA393F39A259041F6AEC6921F925CF9
- MD5 SHA1 SHA512 SSDEEP TLSH