Overview

overview

8

Static

static

6

roblox-game.apk

android-11-x64

8

roblox-game.apk

android-10-x64

8

roblox-game.apk

android-13-x64

8

roblox-game.apk

android-14-x64

8

roblox-game.apk

android-15-x64

8

roblox-game.apk

android-9-x86

8

Analysis

  • max time kernel
    64s
  • max time network
    154s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    23/07/2026, 22:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    roblox-game.apk
  • Size 12.6MB
  • Sample260723-2aj82ayake
  • SHA256 a7ce7f344d5208100cc6811a676540301351b0b836aba0e6aed233c35c0cd0cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bankerdefense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.aptoide.android.aptoidegames
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:4215

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aptoide_task_info.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-journal
        • Size 512B
        • SHA256 ca6256d0a569e333e04f1c15d9f3b86d07671fbb6df6b6b5796419ccb3cfc9fb
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_task_info.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_task_info.db-wal
        • Size 40KB
        • SHA256 ff87fefe3868313ef9a74973f6dee4e544c7719d9026f4b479273e5e540612ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aptoide_updates.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-journal
        • Size 512B
        • SHA256 030018f1a5c4beacf425f2d4055cbb93abf54b5dbb2fa036fcde42312d74c2d8
        • MD5 SHA1 SHA512
        Submit Download

        aptoide_updates.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/aptoide_updates.db-wal
        • Size 36KB
        • SHA256 4f49f821b68fda288f6944f707d49c25dd8abcbd40d18d7dff410f6a92449769
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 af3dcd8c20e71d2dd00dae828a71cf87e20e75a537c138c5de37b599e5f09b09
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 eaa66b8a93b5a1f6296b21a5dc47ba696ebd4368fa9cca0040da9c766f0a9a0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a77e2213051f731648432c7de056949e0cd3a5cd88b1325313ca1a74e22de375
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dc7ec182d6390d58b9f7b8644b8f8524460d954533ebe87a3a54198a38f7f511
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3cebb030e407c995132837dd6d26c5dcd92affa599fb1befce9e8feebc23e49b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d5ecb3284d070c43ae45a9fb1bd642f8e5eb1abef8e2168e254fe4bea4dbf94e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6b97ab00d792e0d1be532d1f9cd7145a9edd31f871b1dd5a5b3bbaa263aaf18f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 5be54abc6fa36d835918a05c837736fa12987619381eab7939c58eaa68d5bd0d
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-wal
        • Size 44KB
        • SHA256 79683ffd7aef91ef50c9df15dca9c8c8c233d4e8e0cb6250f167dab5d4533fe9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 bd8bf25928b294262dc4fb23e9d64b8bc4ba179d5c4cb618ea50de90f55a940a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 c6862818534a7a9a290bf46d328b166b1443f9a999872a007f4030b83c0a3fe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 71827903f1d13a2eb4e554c56f141a39a3cffbd65a06e25ba6e94152d0125e49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.aptoide.android.aptoidegames/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 e94db8f8bd80288872686fe4583fa6cc6e5641e857378dab3a7f9cf5fe41b6c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/com.crashlytics.settings.json
        • Size 781B
        • SHA256 08304a605895d19486143ccba09744f2d60040cbafb93b0e4209123774979585
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B016000011077C7EE5FDB8287/internal-keys
        • Size 207B
        • SHA256 9609293442238e6c722b5615265e3126399e9932408618714496b442f453281b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B016000011077C7EE5FDB8287/report
        • Size 811B
        • SHA256 efeed0d1e81e580742a8691bc1ee52b4e583acfed0625d6ebccb9f9d90022541
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B016000011077C7EE5FDB8287/userlog
        • Size 88B
        • SHA256 2bca613a79e47fc24d92a6d5d2d10da1f5cf2ee15bf936a914b9d4752e94cfce
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/.crashlytics.v3/com.aptoide.android.aptoidegames/open-sessions/6A62944B016000011077C7EE5FDB8287/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2098143695134097887tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation2098143695134097887tmp
        • Size 90B
        • SHA256 fd9360049d5641a3ab6d3b365bdb92fe150d671ab4a6a6eac242e41be717fb8a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4972102458769812007tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/PersistedInstallation4972102458769812007tmp
        • Size 569B
        • SHA256 7ae3031bfd608da3fceb8b4732863ec289ddab3c929aa0242ffb491a55e8a85c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 410B
        • SHA256 e2d320bcf4e186b4dfab2e56e5ca8f87473e1506257ff216bc0b0fedd3f8bf37
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4MDg3NTk0OTIxNzA6YW5kcm9pZDo0ZjlhYmYzNzMwNWM5NzA0NTBmMGIz.preferences_pb.tmp
        • Size 434B
        • SHA256 06c08db66db052a61f396686ae1962445550123eaec9b7e8a7d35f64fa1f69ba
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.aptoide.android.aptoidegames/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 c69d3af6dac1ba6521078ca58acc8c3b8ff91922a9f92d02d60307b1bf868f50
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Path /data/data/com.aptoide.android.aptoidegames/files/frc_1:808759492170:android:4f9abf37305c970450f0b3_firebase_defaults.json
        • Size 546B
        • SHA256 54d808d1b66da8025fe1c485cbd8d1002ac166faec987d3a00d76ead04a83c26
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 b051d194287bfb39d9e74bd70ea8302d6ca9edee957e279ea80b07666c9eb0dd
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.aptoide.android.aptoidegames/no_backup/androidx.work.workdb-wal
        • Size 189KB
        • SHA256 f8502458c3e476e396498104433c5391c6d5bc96b54592f0013e318067892235
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download