Overview

overview

8

Static

static

6

roblox-game.apk

android-11-x64

8

roblox-game.apk

android-10-x64

8

roblox-game.apk

android-13-x64

8

roblox-game.apk

android-14-x64

8

roblox-game.apk

android-15-x64

8

roblox-game.apk

android-9-x86

8

Analysis

  • max time kernel
    32s
  • max time network
    155s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    23/07/2026, 22:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    roblox-game.apk
  • Size 12.6MB
  • Sample260723-2aj82ayake
  • SHA256 a7ce7f344d5208100cc6811a676540301351b0b836aba0e6aed233c35c0cd0cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bankerdefense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    defense_evasion
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.aptoide.android.aptoidegames
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Checks the application is allowed to request package installs through the package installer
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4068

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aptoide_task_info.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-journal
        • Size 512B
        • SHA256 d623fbcc48b4ed2ba3a5bb953cc469c3275bf69c1228c93319bb67b09e683308
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_task_info.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-wal
        • Size 40KB
        • SHA256 0c523e41025c8ed70a2fa24b107393d1b289261cd608845005d2ef90c76527c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aptoide_updates.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-journal
        • Size 512B
        • SHA256 dd8075c88f039909adc68323b165bc21bbb0b2533552c9e30acdf29c9be22067
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_updates.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-wal
        • Size 36KB
        • SHA256 77ce4d8c31ffd239b4c9c8de9de3c58bc2f00954dc2eee7d0b26cb335cf10660
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 4cad793c18e86bb01228d65a1e2eaa9622b09924eadddf789fc1571a5ed4898f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ad5545030a717f31cb10e73c7b95f16b7c6640b38338a519a31a2a948b37318d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a381d34dbfc7739bc067260ed91fb4257cb6b1f3de2b41155bfbd83474919c6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 431606c320de4e413a2d826080a203e9f40bd851f83f57359e6ebf98edbede08
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2a340388f145288c8867ecda5c58991d8dd97363ac730d5a0251136491461a20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6af2025c77e3a8c62e8b8da4b55df21f2a8116f7307f3c405179f5f78de3cca8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a37db7c1cdab1d195c575ead0bffdc378c21a96090b0960f99eb557105c5a913
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7cf84b42c59501c41269f91c3864b44b8c0f2cdde08f2d8a202d7981873eb331
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 61e162e147cc124b291940d17105c627e35eb2d31605d9176f7931da9c325dd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 6e8855fe69129c3fc4dc2c67f35878f5fab01fd0f3857a2b9ee2f9d6e48ba744
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2885a3978b8984de75e4f08e1692137aaf9b4cd215fda5696ec4b848c901f725
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 0a5c7a35e7aa81acee506e4b0612bf172a08a7111c00f6d03f7b2942f6d099d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 17a4ca56ee552d1882e8a7a58d8c19ac8e5e62379c55c054fcfcdfcc30ace13b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9359a7ec46a6f17945e5490eca33ced918b0b7f0a648224cd82b0ed6d8500c75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6c0795fabfdb09f806cd3fc2c7618886c365ab60289425195cb13444b87afa01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/com.crashlytics.settings.json
        • Size 781B
        • SHA256 e86f576e3d888d51d2945871bce1ee459bf3d980a8d1d081fefa9cd03232eebc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B005000010FE45EDDAA24C90B/internal-keys
        • Size 207B
        • SHA256 9609293442238e6c722b5615265e3126399e9932408618714496b442f453281b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B005000010FE45EDDAA24C90B/report
        • Size 812B
        • SHA256 e75c6c253ff82edce9ce3f11dd7418f0147d475502e3ecbe30231731d5dd8daa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B005000010FE45EDDAA24C90B/userlog
        • Size 88B
        • SHA256 0c98002138ae6bee8b1a53da9f0756fba038452779666ecc8847c9472e722b20
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B005000010FE45EDDAA24C90B/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation155001271005494979tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation155001271005494979tmp
        • Size 90B
        • SHA256 c32581ae00d8a57ee21277d05775498cc572798775bc1f62e5e82ab08d9d1945
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5579981626311332783tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation5579981626311332783tmp
        • Size 569B
        • SHA256 e33e2d1c934c5801e46b7bdef1a86fc9673b4e13bca8374b1d800570680aa981
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 410B
        • SHA256 11f85c1eda76128268f91c8f27cb3761ab44ee43dcf45a17228fe17436bd0d01
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 434B
        • SHA256 e890203692c3f15b24782552de2b761d46a786014fcf054407339e321bd62cd5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 eb848e35eb5c7fa8848562abd27bc7fe3b2d076967c2583a69d1e595e5ef3f38
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Size 546B
        • SHA256 54d808d1b66da8025fe1c485cbd8d1002ac166faec987d3a00d76ead04a83c26
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 d5959706c50060789c6f951b6396f94f9066c360a52fe03e6c2e83459f2460af
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 cef6914a72abe6a87af4b0d1ca5d1a0f89b7ca7a38d56be8259619c8e29eea78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download