Overview

overview

8

Static

static

6

roblox-game.apk

android-11-x64

8

roblox-game.apk

android-10-x64

8

roblox-game.apk

android-13-x64

8

roblox-game.apk

android-14-x64

8

roblox-game.apk

android-15-x64

8

roblox-game.apk

android-9-x86

8

Analysis

  • max time kernel
    17s
  • max time network
    152s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    23/07/2026, 22:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    roblox-game.apk
  • Size 12.6MB
  • Sample260723-2aj82ayake
  • SHA256 a7ce7f344d5208100cc6811a676540301351b0b836aba0e6aed233c35c0cd0cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bankerdefense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Acquires the wake lock 1 IoCs
  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    defense_evasion
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.aptoide.android.aptoidegames
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Checks the application is allowed to request package installs through the package installer
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:3274

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.3274.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/cache/oat_primary/x86_64/base.3274.tmp
        • Size 490KB
        • SHA256 cf3ecd749235b9babd46decb04b051263f879651cb2b5f398769ac0be7d24ac9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aptoide_task_info.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-journal
        • Size 512B
        • SHA256 425d15d117cd956fd510291938b46dfd14eb812b786ca27f5d001cd78a11cb17
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_task_info.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-wal
        • Size 40KB
        • SHA256 1f03b68c43f057655a564785da8b1f6170a785d690828e6d3c3f7ab1c36ffa34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aptoide_updates.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-journal
        • Size 512B
        • SHA256 586ee5e2314f010880c852a56e4bba146e862575c6a13643cb584095511c5453
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_updates.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-wal
        • Size 36KB
        • SHA256 fd9765f6f192e2ab6bd25012334e587acaf755099e48373599fb891828a1b53a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 8424815c58f2f7f4768ec2e076448a634587521f0203c028b5300aeb4daf5422
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c93adfdc5e1bc5b823ad7f2a513dac22d6e312c1e0a83ca1f3db2acd99eec1d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b57e0dd327c94679dd4b4d1a8d51ff7f34136e968c6d6af0c6e9259e404954ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 2c0a6aa2f0580e7d88c0d9fdc2837964931516a965b1158b3ab614d4562b5966
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b74615a6fecb5226599160b8174503118528bf96fbb8928913be4e5e11eb84e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c71c4ffed0603552d049e964a5d65ad7bd2e454d9337429e959dec8e8c305591
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ea3c8325013a23f1441e5c1d4786b121976f1818dfd7f3511ebb42d9306591b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4bca89f322e5b7ef4afde3d081b31ea0a5f62dc220321b3c07fd98ddf63b1ca9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 74f7f187b35af75d1c56909b1870f968aa6d3c4e5c4abbbfc49b0bb7c028a4d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 63b46480968dd2d2b53e1e6b7fe6bcef65000d8a7753b1e0f6f1ff02b905e28b
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b61d51f03b0be239d0de63438e3d896f0f46697c4e979688dbc12d4719b60ed0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 c58774df7a645010e762c223a889c94d93a8cb53643b6caff5062dc8577a082d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6e6e6bb0730cc6bf1e23326e263c426cfe998cbd3a248fd9d77a3881794e76c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 1e203cca0405597b879983e045c266c40eb94b9871c100965683696add258b48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 27a04461e25146e9b436a0f60aac1d06d9ebd7d792ca5e763023789c9ebe0754
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/com.crashlytics.settings.json
        • Size 781B
        • SHA256 97602148e0c3d7e5cd73559d4e039635db63fe2173950c70db6cc96c4c91001c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B01E200010CCA1E06FBCC16C4/internal-keys
        • Size 207B
        • SHA256 9609293442238e6c722b5615265e3126399e9932408618714496b442f453281b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B01E200010CCA1E06FBCC16C4/report
        • Size 812B
        • SHA256 a9376fd8518b5d3f9f0f88d9435d90394a57a71db2dde85c516cb12f1d28e8e6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B01E200010CCA1E06FBCC16C4/userlog
        • Size 163B
        • SHA256 a22396ec06ac6fc63f55fe3e1fb7e3ef14409547f4bb3814390a92bb731a384f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B01E200010CCA1E06FBCC16C4/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation3577465994877906595tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation3577465994877906595tmp
        • Size 90B
        • SHA256 d70a109dc123fa135d10464d3346f8db6c219584a13318ac9b782a1598f287d0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3949666817858901262tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation3949666817858901262tmp
        • Size 567B
        • SHA256 32698e389fecdbd918c57d3b1b550138da1ace10e0f1bb33330b93fd5abe6f67
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 410B
        • SHA256 de690a94aa76ea12b9581355ff598b4b3d71c61838d271edb1bcf104260b699f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 434B
        • SHA256 4f5ec0e73cddec1729fb960d9fd91b89ecc6d415c0a79d3e211177ddafd8457b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 eb848e35eb5c7fa8848562abd27bc7fe3b2d076967c2583a69d1e595e5ef3f38
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Size 546B
        • SHA256 54d808d1b66da8025fe1c485cbd8d1002ac166faec987d3a00d76ead04a83c26
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        storage-info.pb.mobstore_tmp-3274-67-1784845397714-0
        • Path /data/data/com.aptoide.android.aptoidegames/files/phenotype_storage_info/shared/storage-info.pb.mobstore_tmp-3274-67-1784845397714-0
        • Size 53B
        • SHA256 399ee236f45749e18d6e3e2e7ec3ecedff6cfe3df4388a6fd019f8cccc7207fd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 2b85f8cb39e920269cb2d8885a3c7e18923f50e1008891791c44382cdf95adc2
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 05c90e80bb895f42096629216002f9275a07f08712c18b6c2fbb19048c64d831
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        device-encrypted-storage-info.pb.mobstore_tmp-3274-67-1784845397720-1
        • Path /data/user_de/0/com.aptoide.android.aptoidegames/files/phenotype_storage_info/shared/device-encrypted-storage-info.pb.mobstore_tmp-3274-67-1784845397720-1
        • Size 46B
        • SHA256 215957f622013a5cefb36002d53242bd26e1073676d383a598c5ac0e899e5ac1
        • MD5 SHA1 SHA512
        Submit Download