Analysis

  • max time kernel
    3s
  • max time network
    157s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    03/06/2026, 00:58

General

  • Target
    Delta-2.718.1110-02.apk
  • Size 221.5MB
  • Sample260603-bbpl2ag16q
  • SHA256 b3539c480a1e771a2194f05c08a4e721aee021b92535790057125641903b4cd3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Checks memory information
    PID:3362

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        15069a97000ef38ed70844a30712dd61.0.tmp

        • Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.0.tmp
        • Size 6KB
        • SHA256 898eab11ac1909db6f61c2ab9cfcd0e0440b93e178847c7f0f45989e858b3b74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        15069a97000ef38ed70844a30712dd61.1.tmp

        • Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.1.tmp
        • Size 36KB
        • SHA256 2f933593323f920a9a67d17ebeebfaa04a562d24b0bf83be17ff5f12a6b08ad7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.roblox.client/cache/journal
        • Size 125B
        • SHA256 898bd2a419daf310b06a6a94778182ab7027fe029fe75eab0677a4ddeffb7ccc
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 3af335e1a9000c82f29286700ec15effafe8a549657e9260f46e31b4e355ea21
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3ce302c231b6da97179490320156e08a285dce99740497b3591688799ad8fbff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 7514d7a8c2d76ededc2a0d87c9dbd1184a0cf8126f5a06bfb4edaaae8fc0b470
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 92192f8f0933c6f21fad4dc20ea59033bbfcc2238ea3f1dc6b4193079463daad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 73cd4c924f1e619cd32f5fd8cde9e612ad3e1ef4f9553cb118230e2d3ec5dbef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0009f792476f4ef789fcec9e5b69ed610381912d8182ec8156fbe985147e1a7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation6913550614863686227tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation6913550614863686227tmp
        • Size 90B
        • SHA256 efb6cb9016c13f3aeeb916cf957b46bb9bad04f30ce2b7695849f78bb4fbba1c
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 a18ccfa626f42a0e29a31d84a31824e2755a83f0da7a54214fd4549983701cbc
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 4a88dca3f3108ac2a29c4cf6515dccf4e97df3f1088862d24e936c96b5d69d40
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 ce2e2a343b6b5b62c3c10b73561903742638c9929dad007a0a11129fe42ef8d6
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 a7c8a4e56c7260074419f203ccf27beeb89bf0dff6e3c9c1ff13cc4277dabe0e
        • MD5 SHA1 SHA512 SSDEEP TLSH