Overview
overview
8Static
static
6com.alike....2z.zip
windows10-2004-x64
1com.alike....2z.zip
windows11-21h2-x64
1com.alike....ux.apk
android-9-x86
8com.alike....ux.apk
android-10-x64
8com.alike....ux.apk
android-11-x64
8config.ar.jar
windows10-2004-x64
1config.ar.jar
windows11-21h2-x64
1config.de.jar
windows10-2004-x64
1config.de.jar
windows11-21h2-x64
1config.en.jar
windows10-2004-x64
1config.en.jar
windows11-21h2-x64
1config.es.jar
windows10-2004-x64
1config.es.jar
windows11-21h2-x64
1config.fr.jar
windows10-2004-x64
1config.fr.jar
windows11-21h2-x64
1config.hi.jar
windows10-2004-x64
1config.hi.jar
windows11-21h2-x64
1config.in.jar
windows10-2004-x64
1config.in.jar
windows11-21h2-x64
1config.it.jar
windows10-2004-x64
1config.it.jar
windows11-21h2-x64
1config.ja.jar
windows10-2004-x64
1config.ja.jar
windows11-21h2-x64
1config.ko.jar
windows10-2004-x64
1config.ko.jar
windows11-21h2-x64
1config.my.jar
windows10-2004-x64
1config.my.jar
windows11-21h2-x64
1config.pt.jar
windows10-2004-x64
1config.pt.jar
windows11-21h2-x64
1config.ru.jar
windows10-2004-x64
1config.ru.jar
windows11-21h2-x64
1config.th.jar
windows10-2004-x64
1Analysis
- max time kernel
2s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
04/06/2026, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
com.alike.freerobux_9.12.2z.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
com.alike.freerobux_9.12.2z.zip
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
com.alike.freerobux.apk
Resource
android-x86-arm-20260325-en
android-9-x86
Behavioral task
behavioral4
Sample
com.alike.freerobux.apk
Resource
android-x64-20260325-en
android-10-x64
Behavioral task
behavioral5
Sample
com.alike.freerobux.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
Behavioral task
behavioral6
Sample
config.ar.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
config.ar.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
config.de.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
config.de.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral10
Sample
config.en.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
config.en.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
config.es.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
config.es.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
config.fr.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
config.fr.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
config.hi.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
config.hi.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
config.in.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
config.in.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
config.it.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
config.it.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
config.ja.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
config.ja.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
config.ko.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
config.ko.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
config.my.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
config.my.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
config.pt.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
config.pt.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
config.ru.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
config.ru.jar
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
config.th.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target com.alike.freerobux.apk
- Size 38.2MB
- Sample260604-2bjc5agy6j
- SHA256 ed5671e10d3f00d42de2b239952c32258db9f609d308d191bd5a3f95df88b0ad
- MD5 5289647b2ac94eacff084c89eeca5039
- SHA1 2dfd39fd751278381d27be764a392f4e6e2ba6ca
- SHA512 21fcab6d4950ba1164d88a98229cb1b0eefe8dd2e1f153f20893ccbd39cb6aa7315b6bb2b5e43023a95708e73f06b8ecde7fdf94e90ddd401dc1c9aca39ef4d5
- SSDEEP 786432:DPSv6+3jheP0CHG24K74TcTUiWEZ+H/YznaQPUlY:DPSCIjhePdu+44TUlEiAW6P
- TLSH T1DB973396E728E81BF87B19328E7E6321D6459D019102AFD73544B3082EF7AC18F59FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 9 IoCs
ioc Process /data/local/xbin/su com.alike.freerobux /system/sd/xbin/su com.alike.freerobux /data/local/su com.alike.freerobux /sbin/su com.alike.freerobux /data/local/bin/su com.alike.freerobux /system/bin/failsafe/su com.alike.freerobux /system/app/Superuser.apk com.alike.freerobux /system/bin/su com.alike.freerobux /system/xbin/su com.alike.freerobux - Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4894 com.alike.freerobux /system_ext/framework/androidx.window.sidecar.jar 4894 com.alike.freerobux /data/user/0/com.alike.freerobux/[email protected] 4894 com.alike.freerobux
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 fcb7123b681f2322cbf7bff82f6efb0f6d94fa2839a9fcff695d7754fee47efe
- MD5 9d896bf2c682427be562c30ab45fbee8
- SHA1 b0d352b24905654b82bf972c4e20d3d440dc81f5
- SHA512 9516df40e54d5be89b27e9ab63241e688797e1dc068cd4a99de192bc5bffc9f789d82af2487460244dfe9ec7875710df6e0119f7409e6a219fbca5c46d3be052
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSI:rAMEX0wIyNjaI
- TLSH T1E843639D1A2C2221C57E283ED3E143635B7C93DF572392723D908CF98DC246974358A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 43e4abd462ff352f124e734150f1dfb22d82a6bdd9240882225411fba66ff12d
- MD5 a0713f682724900bf70362bce7f52820
- SHA1 ca6225d277b1e84b0e73a3c47660dcc3c4bf3dd7
- SHA512 af637efc7bc366408dc897966b5d797558fd78597d5d457cd1098f346b4ea2a563929eaa858cc257e8dbb70b504e6698c032ab4714f213c316ec828bd337631c
- MD5 SHA1 SHA512
- Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 ce9ee77cee984aa39a6d94999321a66871e65361aec84c2142083231b050e7d0
- MD5 82074ecc1c1779ff155c74b43640b695
- SHA1 2f79020d27cdb7153a2716eac1c0b0e95f2d6fc0
- SHA512 5a607372e62a3df4c2d0f16d0c780bd9486dbe890d8d4d67e5ca9ac1ee22ca14e0068e2028da2961c2a910c1f02390a8232c6b577c28e9dae8f237db5b309574
- SSDEEP 6:7+/l9vl/gn1Y0/lng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwfTn:7+thl30RqLiuWdYRmBEyPbJn
- TLSH T14B02228873820C12CA2A167790D6C3541D00A72881A2CB5716D009947C0B4CCB8E0D88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.alike.freerobux/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 ad55de9e0c6108d031a8529dcc05a7960031b2e5813c193335f36e28e270415f
- MD5 451d1da90c3805801df0414275e888b2
- SHA1 aec458c39815a2293d5c0e80de316da9f1e5e39a
- SHA512 dceb0d8979e7168d17333fa43c245b6b77e04a8724c6c158b569b7bc8386b2ca758d4522c442ea477880227ac3c4c2ab43b7d84d0bc1bd3873f9606413601f61
- SSDEEP 6:7+/l9CDPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKkG/q4:7+tQ7qLJdeWRmBEyPbsD
- TLSH T14202C08973400803C43D9777B0C883402E10A7289373CF4F1691085C3C077CCF890D84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 0d255d94cff2588c93cbe7657bdda247d04333f4083de19db2941a5d3667ee29
- MD5 e145bc8b5413a9a3826ef1cf99c00dba
- SHA1 6aff6f046890fdc29bd211fd0ab3ae81cc040185
- SHA512 7e3bfd61ac1c2b489972704133a834061ebd2d28b5220f25e71b0f01878df9adf8cdacb0cd1c8c9b7cc04dce8348b0cfbeababee0ba01b87677353c6e5c26233
- MD5 SHA1 SHA512
- Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 e25a552bd0cab9f97576c1999c9844f46b707ee5be4c46822d1a674f9f58d2ea
- MD5 e83a0501f9e0a240aca846eb49e23b1b
- SHA1 a88dde3b0b4f312822de308dbf55fcd077edfc67
- SHA512 35369709c04880f60e09cd9dae20285e75b7c415f6a0a46844cf99d2eab90755d615668d658d2e2a4b48cfb42729881f390f5a3cba4dab358cd2ca35b2b80cc8
- SSDEEP 48:b8FY66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchIc:e6+hdjnHtDRMpf8UzS6+BD8q0ExPuDxO
- TLSH T1D6B3224E0F0D3540C09958F5A9D40FA179BE812EA793E3F169D10075AEC39B0DE25DF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.alike.freerobux/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 57c600586633f7b24672ac90705aff6536f01be134b023f72c0e5dd5ef3b9eeb
- MD5 d9492ea5e296858d0e5e284b11c29956
- SHA1 0df1991b7d0d145f8b9133c703d7a973ed0485b3
- SHA512 cb25089d569e4355d403676125bf30f05eca343117c126a936a05e3135d0b9594b3f3a49a3d340c205450a563484ad6920f5df6f96cf515f46550fe8b55badbc
- SSDEEP 6:K22DY2pg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/82Btl3/fRJll3/9iOw2:KvtpqzdeWRmBEyPbP/VBf3/1l3/9iOw2
- TLSH T12D72C26D53882572D0180B7B64CFC3082DE1DA5AB793C74B16D10411AC837DCA9A0F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.alike.freerobux/oat/x86_64/[email protected]
- Size 930B
- SHA256 1ac455333dfd58c0f1c1a8f3418071b8a8601bdc3bd06594fc4c6fa20576401a
- MD5 88af8a930ea63371fdb45aa501e1dfbc
- SHA1 345c3d6fa1420407e6e5b05ce41db5c52af79a19
- SHA512 8b2050db7654da69639d10370ea41d203c41cc31efc07f73a7e3a86bdec30cd3165b1bd727f3c8868e5a485e4294919845d2dc3b28d8eec750e52cc634fef526
- TLSH T1E3117D433B883000DBE568BD5720151325103DF2D82A9DE75DE486F634A5A89BBC7D1F
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.alike.freerobux/[email protected]
- Size 3.2MB
- SHA256 7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
- MD5 42a776716f329899669f6d761d626003
- SHA1 7c8a66fddabe92a33367f14c29f13955149223c1
- SHA512 bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1
- SSDEEP 49152:yyhR1q3qGEyTdFaXM4f0Hm/lJem1LGlCIoXI5qbc6:hsEDfPfGmXIN6
- TLSH T161F56C19FD210B21DE9CC1BE7DEB47126B356886DE035B162598E231EC8B0E66BC73D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH