Analysis

  • max time kernel
    6s
  • max time network
    254s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-es
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-eslocale:es-esos:android-15-x64system
  • submitted
    27/07/2026, 04:34

General

  • Target
    Delta-2.729.840.apk
  • Size 203.9MB
  • Sample260727-e63zpavygz
  • SHA256 77c3d0fd8d1376980b4e5cd12f32162c7bb7b400ed1d2ca5d53e0aed485b6467
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:3402

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        base.3402.tmp

        • Path /data/data/com.roblox.client/cache/oat_primary/x86_64/base.3402.tmp
        • Size 539KB
        • SHA256 036774b6909d2642b625a265f689f349b5bb7ec1e0f09a2d2e16913cd5b53455
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bafb1913845e23f4a876b7b2925fd30b6260eeadaaa5b732cc5d3c170bc0a128
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ad27b46920c5160a1f1ccc378356b11f108871518a5f8a9c41821db451e9135a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 70dc3354bf04f025e2036886205ec7627b6c91307419e3f510742c5d62d704e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 39f22ec4e987eb35c49fb89472729b05389c4f05a97b92877f48053314e25a18
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ab96501ab9baf09924ee7377617154343520306bcfca82f2e4db48440e97b542
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 12a0540c5c2f8d74920d7e9f8483224e9106dcc4527d91f9090b74765d06288f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cafbef24b5c8a856c7cfb021e0d3f0cc4cd5668415da756542524591363afef5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 4fa78ec2b50fbb66ff95706badcd5358155348e0e7c729f04edbae3b80fcb1ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b565c7b70d1f91fb96d51a85367c44ea7f1bdbb9ea44d9eede4847b3af0883ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation2223890873834487tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation2223890873834487tmp
        • Size 90B
        • SHA256 756de1899c03929856d4465bef06b8361bee9b9088ff089acafbebfbcbc0823d
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation2472665409453688521tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation2472665409453688521tmp
        • Size 561B
        • SHA256 f4d2fb27333fd62111a9af4c82b4fbf464143b5edcbe29a1bfeeac73932ea490
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 e06ce0a0a092181b5c589da8378ab3a6eece4d0c37e917f2f7abf782aaecb810
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 1f8fa1f5b650df4da52ef745bddfa9a35adff9ab811d949606ec6d8cb5cf0ae5
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 7f2dfdb7e24e790a17ca80d5adfdf138f18127bb8dcff2942e4298fbf54ebb0c
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 2ac3f0a85f4ac50aef751659906d547c10947a287398bcbcbc20101ff669cf1f
        • MD5 SHA1 SHA512 SSDEEP TLSH