b3539c480a1e771a2194f05c08a4e721aee021b92535790057125641903b4cd3

Analysis

max time kernel
3s
max time network
160s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
03/06/2026, 00:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Delta-2.718.1110-02.apk
Size 221.5MB
Sample260603-bbpl2ag16q
SHA256 b3539c480a1e771a2194f05c08a4e721aee021b92535790057125641903b4cd3
MD5 8a3743c2a076599d9b759b1451f1981e
SHA1 0d0598a7edb665d0f35614a2321ed3b2fd6f00e3
SHA512 5b420dc39fa1885b0877d179a044705d13ab9995a722bdcfa0fae402cacd798c88c096cefc13c324dbf1abb2b3a9257d39946fb61a021654b2f8cfa5c155a875
SSDEEP 3145728:TWlXLTlteuqUv7MCphgiYg7WP9iyg3AFxoVfK6aTjqk2oS98L2WJ/3s4atF:TkvLZvM/iiiyCHlKH/DSqLJ/3sJtF
TLSH
T1D8B8E009F2824E23DE6A4B3996B396957734EC5E5B06CBAB300E7174BF773840F815A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.roblox.client

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.roblox.client

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.roblox.client

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.roblox.client

com.roblox.client
1⤵
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4432

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/data/com.roblox.client/cache/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
Size 16KB
SHA256 7e6fb816d721cbdfc37ea83231d47e0cc940eae5627deb607c01db2a47929d40
MD5 24e48416810d5d8455725da261e966df
SHA1 6f1cc0d04a03b7652f1824e75d984d6d6ded9a8e
SHA512 085bf35228a3ba1b807efcc9c8c9c7510d74cac3a433978163c6b47c47fd00bd85767d2118776a1be197a87f56e6f794a4ea75bef3e5aa2a042e499a48313593
SSDEEP 6:l9bNFlqls1/P0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOw:TLwE/7LzmzsRmBEyPbBvOw
TLSH
T1157220CDCF106216C157033B7486D3950F68551E43779647176404705E5315CB051F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download