Analysis

  • user interaction
    yes
  • max time kernel
    3s
  • max time network
    151s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    03/05/2026, 03:42

General

  • Target
    Delta-2.718.1110[1].apk
  • Size 174.0MB
  • Sample260503-d9tprabs81
  • SHA256 054c6bc7c7575e32ba9843bc12cf7d6221b214ba6851b39e015c4b1321b17bab
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Checks memory information
    PID:3349

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        15069a97000ef38ed70844a30712dd61.0.tmp

        • Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.0.tmp
        • Size 6KB
        • SHA256 9997a0bf1de4a16698c88f43e264b10429248f45805108d34a610787598f9d3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        15069a97000ef38ed70844a30712dd61.1.tmp

        • Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.1.tmp
        • Size 19KB
        • SHA256 05dd078386ebec60484a87d35461c32e63321807c4a0e4cf083bb999f1c4fda4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 196c046b8baa27fdc20b4e69a4c71fdf1836ec55d7da7da5fb123b9ab791669d
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f11466690e43c9b24204c3be42063fef9cceda39ce656dcdbeb0e31189177670
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 d0093a1246c4f04816fadd7b49dbd9ae89154e4f9b99f312fc6c6167b477787b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 770b7b0e5966128a81e337a5a9fe4334945ca5972b12ae5a80f2066548feb5a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 8d4f1e5fe916dd7a9b5a0b19ccae69e5e0877055520f7b5ce56f2fdbc4e146bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1bfd0e02089f49b21877f94c0a098ab5d8a22e5e9040cb8fc69bd20b90f0bb0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation3326295829445484916tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation3326295829445484916tmp
        • Size 90B
        • SHA256 8644adb423d68dc32d759c810574964d557a08795081ed5044292d8c80a084a5
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation5355375294390068345tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation5355375294390068345tmp
        • Size 561B
        • SHA256 ca7a74d87ceaaede19e40458350deca3b92622a68ef9d72f170e711623970c02
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 b3e305ebfc05f43270481eda389d3b5cc7578286c0ec4e23fd6fe4a7b6637e79
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 f82d976ab081aedddd8d7a624f93665f7490515525bd2ff16b4e35612606641c
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 3896f8b8e03f206ff6279ecf87cbeaed25f7995b93f5fb447fac9fd91a0edaa6
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 5c886caa3f3aa27f8041f5026dba86f8b901f2cf7e8ae3a7c8bf6cbab7532eaf
        • MD5 SHA1 SHA512 SSDEEP TLSH