Overview

overview

8

Static

static

6

roblox-game.apk

android-11-x64

8

roblox-game.apk

android-10-x64

8

roblox-game.apk

android-13-x64

8

roblox-game.apk

android-14-x64

8

roblox-game.apk

android-15-x64

8

roblox-game.apk

android-9-x86

8

Analysis

  • user interaction
    yes
  • max time kernel
    303s
  • max time network
    1037s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    23/07/2026, 22:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    roblox-game.apk
  • Size 12.6MB
  • Sample260723-2aj82ayake
  • SHA256 a7ce7f344d5208100cc6811a676540301351b0b836aba0e6aed233c35c0cd0cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bankerdefense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    defense_evasion
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.aptoide.android.aptoidegames
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Checks the application is allowed to request package installs through the package installer
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4968

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aptoide_task_info.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-journal
        • Size 512B
        • SHA256 fee41f52f43415b05fe03669fc648489573a12f9b02b83d025613c27da84ce2d
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_task_info.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-wal
        • Size 40KB
        • SHA256 b0705b43152babbfd2a104bbe5b137cb9b9e1106d4948b0d28c51f335143f74d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aptoide_updates.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-journal
        • Size 512B
        • SHA256 9713045c8717650dad2dadc6e119b6234f4cb02472c349149d275c96022a7489
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_updates.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-wal
        • Size 36KB
        • SHA256 50326636289b99d174749e01d942378ad565c26d4a371ef3209ad86738978707
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 9e975261d41ceae640405857331d9dfa83025914a698a6995011015a3df4b2bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f2c83d7b9a992de9f27e76a134a505d023ca9152fe64320c894c612ce2476524
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 de71bdda07ab4474b0bc57d49928773524b721a99dfc52e5ddf4f23f16754362
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 6b7e31d3947fe5a92e157c1af5c2308eb3e1b1e6f319f4648877cffa97a356b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1ec5eaa6d9b5c967cc7510ee77e4611017d8603b0c347fe8fdf3390cf75e35a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1e44588982474df717c12a7ae8a86882b446519d32da5004bf5925cce4da661d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a391ae6465f6843e4c54223c4ff30566a0ea3e9012b8daaf749e852eba87fbbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e6e9e5d2c35391a3c7d7e517776271fe9eebdf4307b8d5815cc0d627a8c1ec87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 70535874feddf4b885e5eac8a7e112fc8217a43e39f691bf3c9e84ef819a3f5a
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c978f88881f4aa876067c3d4b6be4ca684a98231cd231da7d16ac37211558c6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 bfc393047ca30312654226ae6ec22989c336ba9cc761c43a2565be3c279fc81e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 415cd87e0b7616bc652ac247ff10b667e6404a27cb6e9d05cb0ffa195fd162de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 b1cdde69ce3b5b3e6c61d322e837b5cb41ae8862ba8ec4aee29d771aa29c457f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 04c4003c46071a2d9873267208a6fa7c9a2586773aa958516d79e2d06c50d2ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/com.crashlytics.settings.json
        • Size 781B
        • SHA256 70289ecc89ca8e6e8cbfa7b8df4d81ef3a07ead62d4be29c80d9e8b3af68e394
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B015C00011368A0E997258463/internal-keys
        • Size 207B
        • SHA256 9609293442238e6c722b5615265e3126399e9932408618714496b442f453281b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B015C00011368A0E997258463/report
        • Size 812B
        • SHA256 eecde5ac8cc8853e4f00f0fdfd25de456a225f1202ebf127b87ec81e97635716
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B015C00011368A0E997258463/userlog
        • Size 88B
        • SHA256 6dd5d39f37c55362a422c6b60ab4a2de186cb362e0428f8a4a95b8802e753fe5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B015C00011368A0E997258463/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation1184498770266240125tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation1184498770266240125tmp
        • Size 90B
        • SHA256 9767c9df51a898dc5638b4f53fad84e963357d5cc742f1b6c965c4903c8ab687
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation7419557315235362960tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation7419557315235362960tmp
        • Size 567B
        • SHA256 e620a34fb8484f52e8c901ca86269d22717ca7978e285df2dce9a9d30c50b19e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 434B
        • SHA256 a0db163f8b3c039b0a24dc8d4e0c7d3d05012ea4e53e4e4b59986ffb96d21219
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 410B
        • SHA256 305009c2edd56c303689fba9ac382b9428a01c6e444fc56c387a65e92b29736e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 eb848e35eb5c7fa8848562abd27bc7fe3b2d076967c2583a69d1e595e5ef3f38
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Size 546B
        • SHA256 54d808d1b66da8025fe1c485cbd8d1002ac166faec987d3a00d76ead04a83c26
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 968c8c67aa71f474da72d0e0d5f25ad9239b38273a55cfa8bfd704f09ecd8188
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 a797f8e3adf3d4d25231607de8bd333f340956e432823389a3c7a502dc520da4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download