General
- Target Roblox Account.apk
- Size 8.5MB
- Sample260709-pj95labv8t
- SHA256 59f163edf38e63fb501758db36e0aee3ecf20bf7e2916c70b987edfb62d652c4
- MD5 93dab465a847057f1ef7568763e6906d
- SHA1 49565fa7f038d46f9f2fd2eaf77efb1e2d861bcd
- SHA512 da5f0352aea1a3b811948b498774258129f906c95f2d23d8cce94c6779bd53872815fcbd44ebed117800af775f546dff7962862db84121f7c8f5df7dc8c3d079
- SSDEEP 98304:RDt7SIGVbOuyc/d/K13NMmzJ/zBaT50tIZ:R57RGVbOu5/d/K11zSWC
- TLSH T16896F043FA05CBC2D4BC86F17A231FA81E270F4895426EEB44547A6F7E766C209DA5CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Roblox Account.apk
Resource
android-33-x64-arm64-20260708-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
spynote
C2
-
portbuddy.dev:40644
Targets
-
- Target Roblox Account.apk
- Size 8.5MB
- SHA256 59f163edf38e63fb501758db36e0aee3ecf20bf7e2916c70b987edfb62d652c4
- MD5 93dab465a847057f1ef7568763e6906d
- SHA1 49565fa7f038d46f9f2fd2eaf77efb1e2d861bcd
- SHA512 da5f0352aea1a3b811948b498774258129f906c95f2d23d8cce94c6779bd53872815fcbd44ebed117800af775f546dff7962862db84121f7c8f5df7dc8c3d079
- SSDEEP 98304:RDt7SIGVbOuyc/d/K13NMmzJ/zBaT50tIZ:R57RGVbOu5/d/K11zSWC
- TLSH T16896F043FA05CBC2D4BC86F17A231FA81E270F4895426EEB44547A6F7E766C209DA5CC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.