Analysis
- max time kernel
3s - max time network
157s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
03/06/2026, 00:58
Static task
static1
Behavioral task
behavioral1
Sample
Delta-2.718.1110-02.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
Delta-2.718.1110-02.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
Delta-2.718.1110-02.apk
Resource
android-33-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
Delta-2.718.1110-02.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Delta-2.718.1110-02.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
Delta-2.718.1110-02.apk
Resource
android-x86-arm-20260325-en
General
- Target Delta-2.718.1110-02.apk
- Size 221.5MB
- Sample260603-bbpl2ag16q
- SHA256 b3539c480a1e771a2194f05c08a4e721aee021b92535790057125641903b4cd3
- MD5 8a3743c2a076599d9b759b1451f1981e
- SHA1 0d0598a7edb665d0f35614a2321ed3b2fd6f00e3
- SHA512 5b420dc39fa1885b0877d179a044705d13ab9995a722bdcfa0fae402cacd798c88c096cefc13c324dbf1abb2b3a9257d39946fb61a021654b2f8cfa5c155a875
- SSDEEP 3145728:TWlXLTlteuqUv7MCphgiYg7WP9iyg3AFxoVfK6aTjqk2oS98L2WJ/3s4atF:TkvLZvM/iiiyCHlKH/DSqLJ/3sJtF
- TLSH T1D8B8E009F2824E23DE6A4B3996B396957734EC5E5B06CBAB300E7174BF773840F815A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.0.tmp
- Size 6KB
- SHA256 898eab11ac1909db6f61c2ab9cfcd0e0440b93e178847c7f0f45989e858b3b74
- MD5 719c5e8033d61c3335cd7ef7f581c71e
- SHA1 e703a6d287131f286b2bfdbeabbe3194c81bb7b6
- SHA512 608c80fa495edf36144f97cdf35f79f241f79a63b692d6e8fe100e6e7b3ecd7617dbec34bdf35d20ab2b8dcb3bfdf395bee775d3c30f13073acef47f531bfea5
- SSDEEP 192:N3fR1jnGb72h9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:ZPjGvo9VH3duhBKqPs5jMi
- TLSH T124D16C2A1F70265A1F93E056E7AAFF1C3511F58BE1F14D9EFA04301AC5C8A2420EE4DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/15069a97000ef38ed70844a30712dd61.1.tmp
- Size 36KB
- SHA256 2f933593323f920a9a67d17ebeebfaa04a562d24b0bf83be17ff5f12a6b08ad7
- MD5 5e8663aa2002949dd7402b4505dde6ea
- SHA1 f5de1f090694c3097fd5b6e1fb84f78b7136a6b8
- SHA512 8032bfc1ca887ff137fe193a8aaa45e2f3bb6babd6fba30f30c93a884444dc94d7d831a50f975fe7392d0d7d755bc3ed6782c13ce81685a21bdbcfc2f30047b4
- SSDEEP 768:4eu7Mi6OBvDF54Ml3z5K6xWhrg3FQrx8aU34vlIBW:4e8Mi6OFh5D3z5KSmuFQt8akk2W
- TLSH T1E9F2F15C7DFAE2560512C1421E3E2BBBE1AFC49030A674CCAA69DF4547A34D242BBD71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 125B
- SHA256 898bd2a419daf310b06a6a94778182ab7027fe029fe75eab0677a4ddeffb7ccc
- MD5 752afadc430ca40dc0de8bcafea4a97e
- SHA1 4519aa7d988546c062d142678a7cff6aafd79ea5
- SHA512 dedff21f4504c0b0e9c60738ce7458093d8b1be7e150e1df764985457505f3b81bbab3b7c45a90776dca16ce38de34025d9db54b59456bc7ec24a8040dc04016
- TLSH T1E0B0129C5300C104CF0CC7F1DCA2755C82547438600CFAE3B30E314C48474211724484
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
- MD5 dd9a2fe8f7bc14471ac42c324c607a30
- SHA1 f88c5a77e00aec2c00147b84e0d346cab31804f1
- SHA512 f5edea485e7aec27b231844b38e7741e8cfc64ffca299467c5761093e8e173ffef1ab808db141519cba717fbc2d28265b5cc316e6221f6997433bb3ff0c4e0da
- SSDEEP 6:l9bNFleLIls1uGo9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0Dq3:TLDEuX9F7LzmzsRmBEyPbBvOwVQ
- TLSH T1F172D8CD8F10A206C517033760CAD3950F78551E83779647166408605E52598B451E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 3af335e1a9000c82f29286700ec15effafe8a549657e9260f46e31b4e355ea21
- MD5 bd3456f50ecb23653f455b947670ccd6
- SHA1 f22ef0cf80086da5be1c96f0400a652f7f5a7cc4
- SHA512 fd01fee637edb2a7434ebe91ad0d2f1e5884433b3df19adb5ebcde96013623827995bf26d79c919b1fcc6fcd312d01329ba0a8996f3cf427e8895d8ac04f9a5c
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3ce302c231b6da97179490320156e08a285dce99740497b3591688799ad8fbff
- MD5 649f9efcb0ab97cc0071f0653865fc8e
- SHA1 4d5e52a584f116e604886dfe73ce794cd4347ed2
- SHA512 f9cef297fed15677ef5018a2b8d261e4b497c671e2cfb71c143bbdf3f2f127da9bda592f8eb998ba0939d3c5351806b0252d47e8c60211a336135e32f9367712
- SSDEEP 6:7+/l9On1PRg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKGSg:7+tERqLiuWdQoRmBEyPblSg
- TLSH T1CC02228C6B820812C819167BB0E9836D0E50A778C561CB87056008942C479CCECA4E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 7514d7a8c2d76ededc2a0d87c9dbd1184a0cf8126f5a06bfb4edaaae8fc0b470
- MD5 4eff83aa564a12485ed23d4db40ea101
- SHA1 0d6c71fe1953442e809385db62c624b51c0f9ebc
- SHA512 eb413d1063526f1dd3294965c784112e95179f9e0beb240af77a73b8253f6f4f49966bfdc4e09092e7c5b4149b8c76c6daaf4f3a17ce0e5f5dddc8afd3a1fa55
- SSDEEP 6:7+/l9HPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKC:7+thqLJdvloRmBEyPbB
- TLSH T19791808967410D13C5196B7790D5C3591D2467199377CB5F19940C647D47BCCEC90D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 92192f8f0933c6f21fad4dc20ea59033bbfcc2238ea3f1dc6b4193079463daad
- MD5 f3d6b868a19f4b17a13a7eb92d8539f2
- SHA1 5de60fc8a20acee5f1447e48b9a9a872323cf2a2
- SHA512 c87468d49f911e35dc3164299e886d59772f66a8fe65e009abbb21de9b0f5135908fa9404c6736fc3e94f384dd95cfc78a21449603ff3bfd75111756fbb59886
- SSDEEP 6:7+/l9tOPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuK0a/1:7+t6qLmqioRmBEyPb61
- TLSH T17302228E67800C03C0291677D0D883690E20F318A221CB57056018682C026CCADA0E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 73cd4c924f1e619cd32f5fd8cde9e612ad3e1ef4f9553cb118230e2d3ec5dbef
- MD5 f625b669b9028b50b1cdef0fdce6b052
- SHA1 230f67bbfd70cc1d15639665af433fbf40968495
- SHA512 9041786e42d2bda6193af06ef9d9912825a3b366c5743d491e9aa172eac6db41c00662b054e2a862fd8474f10a1a32567588ed95c4e532d00593c0a7e15277cd
- SSDEEP 6:7+/lNK/7g9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKU:7+tyqL8Ef9n9zmzrfRmBEyPbb
- TLSH T11F912B8D9F112603C17B0B77B4CF93665D38621D83BBAD572B980474AD4354A9052F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 0009f792476f4ef789fcec9e5b69ed610381912d8182ec8156fbe985147e1a7d
- MD5 b5e3bb76852d9787fc2c41b7c53b67cf
- SHA1 88478d8ed5ec00afaf342287022f173bb71823e4
- SHA512 3d808a15322668f0cbc3c8963d14dae2cbb507c576c96302f282089a70d2773a23cc8b1c872acf4f9035a1c0549f0bf79739fd27a93e525719fb5f65deca9e78
- SSDEEP 6:7+/l9qBg9bNFlqls1B9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuKf:7+twqLwEB9F7LzmzsRmBEyPbY
- TLSH T19002208D8E306113C157037F74C753955F28551D43B769531B7404746D63199B051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation6913550614863686227tmp
- Size 90B
- SHA256 efb6cb9016c13f3aeeb916cf957b46bb9bad04f30ce2b7695849f78bb4fbba1c
- MD5 d5907a6d9ff1d41daf9b9c5ef5c66412
- SHA1 87efc9bcc43fbbe8a2907ec6091657c210248040
- SHA512 95a7ef23422c545063dacb006fac300dfd8527b839ec6e1596e4669c489d1a98465e9ee6a8b2265fc9b6c79a26a8bb067398b9de702c4c8a9a66b529a6d92394
- TLSH T136B0124247B18341859BB2133D4CD2006ED1144048498F084A08D45002D21E5D143DF4
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 a18ccfa626f42a0e29a31d84a31824e2755a83f0da7a54214fd4549983701cbc
- MD5 b66cb33b77753679119c179fe6764dbd
- SHA1 b6ee6b48bc9d555943b2f200b2d13c83171c710f
- SHA512 b4c9e56a0086137ce6c19d17939344d637150da6c83c03b1f9e7460cfb9521f4ddb856edbd8b5548ad8da886217ebe7503ae064b1e4bb8339c488effbfae881a
- TLSH T16CE02600DAE16BE06C7B120EBFA4011C0F2FB39561BA045931F40184FA0AA84E2C3F1B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 4a88dca3f3108ac2a29c4cf6515dccf4e97df3f1088862d24e936c96b5d69d40
- MD5 e4d48baca69e83d2bf041bcf590060ac
- SHA1 bc3ec3edcc9b9a605248fb7a16a70833bf50eed8
- SHA512 8ba4f772c073d9054b2593177e33bce23d676199df58a9c700f46edc2ca949e3b2b0b2788259f6148bdb931194606fd2129af02ccf0370ac03940f034b4d3063
- TLSH T121E0D800D6E56BA16DBB520EBFA4011C4F3FB39551BA445925F80184F90A684E6C3A1B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 ce2e2a343b6b5b62c3c10b73561903742638c9929dad007a0a11129fe42ef8d6
- MD5 d6b93c19c1ff97bb8628c2d88eea0f29
- SHA1 12c510d961fe276d84debe6856a6dc40aa09a5dc
- SHA512 537dd01dbf3b320b006a9f58d535bc4432be6c947a24de9ad30fa66aebf709417c9deb3402f7a1a3d990dd3f8899bed2f58a1c901add79995402932d6067bc3b
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 a7c8a4e56c7260074419f203ccf27beeb89bf0dff6e3c9c1ff13cc4277dabe0e
- MD5 62d379f21bf3d73d74a2a4d588b1882c
- SHA1 19f9a183ac3290fb89208a69127a9256930ffce2
- SHA512 8aa1c2c5dec2e1356edfce7a905a2385afa73d06178aa973b403fb55b0e8c6f4318e30ddcddba99462e41c6df3de2c2d929d876d19a667e1cd008d0931906e71
- SSDEEP 96:abPlIJvdf6+OtidjnZRWzzb8/KeKcK+zSPKz+XD86u0ExV:e6JlUtidjnfWzzb83zS0+XD86u0ED
- TLSH T1D0C3248D0F9A2600C1B964B0D9D00FA17D7E422E9793D3E2A5B100B9ADD7925DF25CFD
- MD5 SHA1 SHA512 SSDEEP TLSH