Analysis

  • max time kernel
    3s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2026, 22:24

General

  • Target
    com.alike.freerobux.apk
  • Size 38.2MB
  • Sample260604-2bjc5agy6j
  • SHA256 ed5671e10d3f00d42de2b239952c32258db9f609d308d191bd5a3f95df88b0ad
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.alike.freerobux
    1⤵
    • Checks if the Android device is rooted.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4317

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 6bb3adf8c186bd88d680957288d725e368c4e7f40c70b686f4a8244ac338e5fa
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-shm

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-wal

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 463d02c65b5f638faef779b8e756ef64c2d9cf4e2b2f9b56cb53ff5d9f7e8653
        • MD5 SHA1 SHA512 SSDEEP TLSH

        audience_network.dex

        • Path /data/data/com.alike.freerobux/files/audience_network.dex
        • Size 1.2MB
        • SHA256 2b537d59c6399ad5b2bb3ab608679c13acb8dee77abf17509591132a848c524e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 013010050334f2295d13a7bb2e73427cd185d5fac93e8a1130361af765b14df5
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 8453a88bcd30ee7f8449a832ed8093f112f6baae506a08a46576e81943214318
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 3edf4b5151dae51ed77599f31c513b332f92adc624c639abe0415df0d9b2a503
        • MD5 SHA1 SHA512 SSDEEP TLSH