Analysis
- max time kernel
2s - max time network
774s - platform
android-13_x64 - resource
android-33-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system - submitted
08/07/2026, 11:59
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Roblox_v2.725.1142(2546).apk
Resource
android-33-x64-arm64-20260325-en
4 signatures
900 seconds
General
- Target Roblox_v2.725.1142(2546).apk
- Size 140.6MB
- Sample260708-n565dsf18m
- SHA256 435d5015b950b5e1149ab4d44541a4d13846b40a52e57bd9bb62bd41c1e5264d
- MD5 cbd6cdfa5373e8559de508aa9b67add8
- SHA1 f03da2e90477da6bf08f227747da5696d6a3303a
- SHA512 4d9d053703a60b416a5a00f22d2cc3f6bcecb7c457d27ed13f42475bd92b431f397ea91e7c60cf4a4fe0d3f98a8b00f40d160a12cc6ec51ae9c1654c0ddd6469
- SSDEEP 1572864:N+D17HFIU9DYgAWfn1ANBxEFF4TUqq0AfceVi03BftVIgtZkdfcHe:NKrfAWfn2flYdVz/VTtadfB
- TLSH T1D268CF09E2824E23ED5A4B3996B39295B735EC5E6B03DB5B300C7174BFB72D40F816A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.roblox.client - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/3280246c8498e1363bb1e597334aeb92.0.tmp
- Size 6KB
- SHA256 3ec1c071a7693bf14d53a869f94a5ba80acab423c5053505de3e8fe19c5d53ea
- MD5 fb06ba2fb09c80423b0b3ecaac54feab
- SHA1 c0e61a442b6c8f563de152d60a27221e113b719a
- SHA512 fd85c137964f05aca04d3435f7273b28be4bc921cc8e61d3fede8dbf6dd18a14efcdc8ec2a57ad7786085f38182ab8b41ba7a69e941ab2094be733a111f855c6
- SSDEEP 192:N3w5m3jnJKwsb7Mdh9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:KIjJKwsv49VH3duhBKqPs5jMi
- TLSH T120D16C2B0B612A5A1F53E456E7AABF2C2510F547E2F28DAEB504301AC5CCB2425DF8E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/3280246c8498e1363bb1e597334aeb92.1.tmp
- Size 24KB
- SHA256 d13c04d46da37275211340411f15e477dd8afac75b1e8255d8d418801ee55165
- MD5 3d356334a87c362bafb59f3756b8a500
- SHA1 244e6b0e86de52bd3c21a0afff35b4caf0916b3e
- SHA512 0b2c6e624f35caa1aae3e892477dd1842b999dd4393ef921a79123c5c364ce8569b9eaf7dadf11fac7129c329257e80bc42c78f13d22abc806c3146667bece4b
- SSDEEP 768:tP2HQYGjXF76TyeM0eytqzPH+Ii1OZS0+2/G1:tPvUnMr/bH+ImOZoN1
- TLSH T1A5B2E04FE27E88729640E4960869AEA45680DCCFF9740A3EC21FEC81781657DF46F83D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 39B
- SHA256 e8b5e22446d16930a69065e1c7f95a5574f6ab9923c6010adfe8e692374f7fe3
- MD5 63adba16de057c143194d36ca4b98706
- SHA1 f64a30fe48a0be3930c8d45ca6fd881e4fb77bd4
- SHA512 c66a616671f3912e63bd41145c5ecb02fd3d03c985019fc83a3fe2c2bd6281b9dbfb8c3ac6e18dd75eb504dd924bcd8da78fbc51825aba890fbc8fd8601d70db
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2a340388f145288c8867ecda5c58991d8dd97363ac730d5a0251136491461a20
- MD5 8226b5c8e42bf2eb5cf43ad049baee4b
- SHA1 2b9e16b59135c2a51275c60a1258a0e3af8a0e51
- SHA512 a3da4d57f315e982a474cad7a762812b7461e3f8e83b49edff8afcd4ffc4d527557f5018e25c8549454b30dc7ea56144524008be4b373f53ac306e769c0dfd8e
- SSDEEP 6:l9bNFleLIls1mP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwVQ:TLDEm7LzmzsRmBEyPbBvOwVQ
- TLSH T10372D8CD8F10A206C617033770CAD3950F78551E83679647166408615E52198B051E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 8b5e55e1fe2a83923690b0e8dfab218d4bb5831e96b14a3d184b2704088518f1
- MD5 2478c5674fe77638b821d6874cd8e6e0
- SHA1 16b37e86158a992aa0b1a76d1993c6df3a579912
- SHA512 8dcff94e36db7da3927d50b638b6f9641d9608b21a8c4befb165a50b1e2464159d3c705c05ebd521c82886f8dea8d084b35c9f83d5bcbe78aef241d06d583417
- SSDEEP 12:TL6Esu7LzmzsRmBEyPbP/DvJ+/0Fl6ELL:TLzHmz3GSP/DvJlFDf
- TLSH T11572ABCD6E10E603E127473A30CB93D20E38610E4333961B3A2408349D435C8B052FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 dc21bc88238f86e6e9ce2a4fd7559c366f7cd6be9bda4e648f5a776ccdd816a4
- MD5 945c06118612801b5161eace992eeac4
- SHA1 c8714d13ca3238776b5823cec843d2e211c77e22
- SHA512 4ffb7d376e4bff7ee8502c22b6bf9fcc8e83fe43123195315c811339267798ae1f8eb8424cada4a3ad4eb6c087322758d1e646ab73b42c7b0725c88cf07fa398
- SSDEEP 12:TL6UE87LzmzsRmBEyPbP/h1V49blqYFljavJ+/0Fl6ELL:TL6gHmz3GSP/h1V499FIvJlFDf
- TLSH T197728B89BA24D643E2274B3A60C7E3C22D3D311F0733D7163A150A2C6C43B84A0A1F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 4d362661ae7140e76a7e4989fa0332f8e140ba5b18d615ca80ae27998c2690f6
- MD5 520edb052e4175c597545e4efe3304b8
- SHA1 fb7964558c641beddfa893585a2cd74ea9377405
- SHA512 bfade7087c55c4b2dee0d555a69e6f3ff7d87805c087eaf814cc00e9d3b7088217924892b2be6bdb79cc2a2041ab00e339d9d86f9d78e75fa5b2a577cc554ee9
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3ff8f5dcf8ded057b8614ca208300ca6a20e4b1347c52240a48d5b3a38c3007f
- MD5 d7ff97ee4a7f222e847e78f842dca502
- SHA1 7c8933e3eda88d3e3c133ca337baaf85e3c766f7
- SHA512 f4da43222d2696892be35ba6745d114442d5b432135ed7e8082dc93f2ce9214d350ecf720fc0667cd1b0f9887c5e5ef59d1b5cc18ad0ebb01888696eda42099e
- SSDEEP 6:7+/l9xLn18TRg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKqQn:7+tkRqLiuWd7RmBEyPbbQn
- TLSH T12E02229C63800812C91D5677D0E483800D00E7188BA2CB478A7008943C074CCB4A0D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 e0b80fc484ea8e28ecff90333e211cca6d1b51b05f8fad5311875eeb46a3ef0f
- MD5 85cea7ef3fd1d341c6f50e960e86874f
- SHA1 efdb8780653be57ade443f1101fa2d3491fa3569
- SHA512 79d21f60c1e9c781a85652649ae045c1bb94f2e355281f68a0061b45287cf1733ee7228b294c2a7cf568e964a5d7261119defa86a755d21767311ce892aedd52
- SSDEEP 6:7+/lsOPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKR2:7+tHqLJdKBRmBEyPbH
- TLSH T10091809D77412913C5295BF790D583541D506715C373CB57556008987C476CCF894E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ce0978e37470f6af22814c3d8b76a5c2352671bd17779bf9f1411f22ef54d47c
- MD5 700cc20582896b008c024b6236d58156
- SHA1 78029aa1695539323b6982719dc4bee8503c45e8
- SHA512 3f949ff3c8625cab1d4a06fa548eb93deed7148167f97a04f5a5397f206b3a7cd589c7d7955114bd3d3944502e889b1b3d2130d013a481d80f096a22b69d5923
- SSDEEP 6:7+/l9VIGPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKrC/9I:7+t3qLmq9RmBEyPbkS9I
- TLSH T11A02228967800C03C029567BA8E883800E00E3168272CB0706600C646C834CCACD0D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 d8c320f41c27fc2dc7b9a349946de14fd6ba1c52ca0688fa31700b7b514d124d
- MD5 1b393e4c3525b4167fc697cf168d1216
- SHA1 71555480884cb9d0183d7918d51ee01fda85cd89
- SHA512 bd095750949e1cc36a0944a961396f69c9b7e9f34dbc50f72e3de679f01718fdc5f6e9b331638cb473f6fe8bbafe00bf742a0fa624e20c44999abb51d8a22dba
- SSDEEP 6:7+/lEg9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKc5:7+tEqL8En9zmzrfRmBEyPb75
- TLSH T1DB912B8D9F112603C1774F77B4DFA3509D2862198377DD572B9C0874BD435499051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 267fda31cf47537381193e2a31b67028ea78ea0d301a1046b06d112bdce17393
- MD5 86c2f5d8d1aa93e6e2e52e7157e5913f
- SHA1 1ac6ebcfe325e4f783278ee6e183eae3dc77c557
- SHA512 79cd36a9fc5a601d53773e3cf908c4230bd047f65b28c1ecc3c2ac669ef2d64dda2bc80884651ceb7706c2ede5ef849da4fff69e0511df127c983253fd0eeb09
- SSDEEP 12:7+tCDvJ+/0Fl6ELWqL6Esu7LzmzsRmBEyPbg:7+tYvJlFDaqLzHmz3GSg
- TLSH T1E9025CCD5E10E603D12B473B70CB83D21E38650E5363A6573A640564ED435C4B052FE4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation3368069790829254233tmp
- Size 90B
- SHA256 1a72fbb27ec49c8a9f52a5602fcf88ca6a9ac6cb8db3fa284b03baf935cfaad2
- MD5 70bd36e45779beafa13cfe53e497b0c8
- SHA1 074ac168ab6e22b0684bef761775272fd7a89a06
- SHA512 5d0353b526187ee1431f7b5ff368849724e0e9b03a022845cd6d169f4d6c14d0142a62b1ae5c011946350908b365b59f6f3479fd45dc4fe9188c9822ffd51d1b
- TLSH T11EB0120056314541C5CDA2021C8CA1005D823480841DCE150E48A44400C21D09513A94
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation8722713780490537638tmp
- Size 562B
- SHA256 4d67197b1f2dc93cdf042c9809ece6db945704c7c3901b6103671a716887b71c
- MD5 522305e1c84a0f2854b3287ff361d430
- SHA1 91672bdd25cb755cdccf17dd21e22559d69d28b1
- SHA512 6f372a37bb260e2040c97f82ae11ee6094c964ae19e1105ccb34c67c87362ac6be10608502d6c3e70a59f1b21b79495b77c5c51f827aa135b9408dc64cb01821
- TLSH T142F026542250CE99C6C6D38113DCAF016D5A10B55B1981642DED9CA844D57AE7287F10
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 ec073f025d3eb7f4bf2af2902ee14f2fc16d277b5f6b235d2a87a24ea1e5cbef
- MD5 74fdcc145778ee9386689153d3ba1587
- SHA1 1f2e8540544ecc6edff8e61f57d001fd1670bfd7
- SHA512 af826dfc23b74aeba616c699e4edbd9cffae4bb5c8c2fd528bbffc6c1fedd1d1d33630f886465dd0c97a869312f02d9314168610bd5117f4d66fecb594a02829
- TLSH T160E02600D6E21AA05D6F120D7FA401184F7FF3A561B2049935F40688FA0EA85E2C7F5B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 dd839576c0964ca5da18740474c5e51e92b3555ae4f632f2439d62d767e0ce6c
- MD5 635abfaf2f88d6263f39e2b5a5aaaeee
- SHA1 10c76f4f1b8736167dcbf33717095ba0bd9e136a
- SHA512 7260192f8ee9e4fefadc722c96de480da048693b17d3ce61e1c1ad2d8ee0104a08512626541810172ba08f97cbf217e95a33aa3c10c3f7ec0b397c858990e7e8
- TLSH T1BEE06800D6E11AA0596E120D7F9401184F7FF39520B6005924B80544BA0E684D2C2E07
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
- MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
- SHA1 fee434f784e73cc7916322e949f727caf8363102
- SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
- TLSH T183810250534000E1D05446B354E113080F06D19496428B03550100428C415440C60E88
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 4f60a5353be10c1c0ec1a9e2d3f4f6223b0f1a3d9c5d46585f300757c9ec759d
- MD5 00c62b0f7aa3e1206c5b7e8b8fa747f6
- SHA1 8e48994f9631bc16e177e0a2134a43452ca32500
- SHA512 ce57e8f174c21f89b643a32620c49e8acf382ff2a6d638c0353d7786887ad0a23f2205d25c31038a0752187bb5cca4da7388286fd95fe5ba68e2449e68ca21f3
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 3f417c7da704cc51bf904d5abb4aa8ce563286175ceef51ac2011e2d43aa5968
- MD5 188a3cb76678bdd83000a98ff1c220b0
- SHA1 e935db27bf3bf888f527f8ed9a81633b56b8fb4d
- SHA512 57f9bbab4c560c54b3d1150cc2108c60a1055278ecbc38db942fe7d7e884179601dc7bd5164f4cd8188605d63549b673bd370d7faec9bec738f4410abdd60d4a
- SSDEEP 96:t1PdO7c6+OtidjnZRWzzb8/KeKcK+zS/Kz+XD86u0ExV:rdO79tidjnfWzzb83zSE+XD86u0ED
- TLSH T1A2C342DD2F482A01C0AD74B1D8D00BA17D3E812F9393D3D275911175ADE2929DB29DFE
- MD5 SHA1 SHA512 SSDEEP TLSH