Analysis

  • max time kernel
    2s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    04/06/2026, 22:24

General

  • Target
    com.alike.freerobux.apk
  • Size 38.2MB
  • Sample260604-2bjc5agy6j
  • SHA256 ed5671e10d3f00d42de2b239952c32258db9f609d308d191bd5a3f95df88b0ad
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 12 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.alike.freerobux
    1⤵
    • Checks if the Android device is rooted.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5042
    • /system/bin/which su
      2⤵
      • Checks if the Android device is rooted.
      PID:5118

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 5984f0edb17bed566842fe52e9c3e82fcedda4091be7aab9ba71405160fe595c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 e32e30cee3b857ad4599225ff19746b40d8babcef831916d2573d1cded6daec8
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 23c8ba1de176ad511d7c5845f93b66b3d860a45e3410723c1e43e2e60d416c35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 677059b5e8f94a8772a7c022e2a9492f64eb8cdccb7f7c0881badc6b1dce48a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        audience_network.dex

        • Path /data/data/com.alike.freerobux/files/audience_network.dex
        • Size 2.8MB
        • SHA256 5c7aa4e2f480fc18ae118275dfd9e78cbdea8c6ea958e9f40e0deafcf02b3e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 bc5d8d338c3b59b49359e5cacd8d09f59a86a11cb00b4c6343eb29df01c6aaf6
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 7355a5dfc4f36aed5977ed44c75126abe48b43397c08780e0c4545e8c0436c4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 e058569d1b6a720c00c7514551c10bd2f360723bec0ab6a2d08186f7d0261e18
        • MD5 SHA1 SHA512 SSDEEP TLSH