Analysis
- max time kernel
6s - max time network
254s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-es - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-eslocale:es-esos:android-15-x64system - submitted
27/07/2026, 04:34
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Delta-2.729.840.apk
Resource
android-35-x64-arm64-20260325-es
2 signatures
600 seconds
General
- Target Delta-2.729.840.apk
- Size 203.9MB
- Sample260727-e63zpavygz
- SHA256 77c3d0fd8d1376980b4e5cd12f32162c7bb7b400ed1d2ca5d53e0aed485b6467
- MD5 58554e796f15e7a59c48779a115a8b1e
- SHA1 59ce7c8dcc129cfeea665fcc4d86bc831eeeb66e
- SHA512 5d1e030e710c1a62ca1dd6f96d92bea60d34a0d7821a6307f7da125063b93d70f563bd1bee4bc91d1d3b37b28ae3eacc9136e170c7a762b8e1cd4fd3b642fd99
- SSDEEP 3145728:wv3Aq1vTNolMI+VDciey63csm83Jaxtzs0X4mmDyc/l4Ki3NWYv7U5:kAqXolUVPL63csdJaxtzs4mN/iKi3rA5
- TLSH T1F6A8F10AF2824E23EE2A4B395AB793957735EC5D9B03DB6F20087174BE773C44E815A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/oat_primary/x86_64/base.3402.tmp
- Size 539KB
- SHA256 036774b6909d2642b625a265f689f349b5bb7ec1e0f09a2d2e16913cd5b53455
- MD5 80cd00947548ab09cd755d1d1f3499e7
- SHA1 c2f4490e5d1908113759cd400a0801577b6fad8e
- SHA512 d5533ee155f42d1910189c4f2a617eaa2b2f5d40b197d598bab43ad147cba99dbee320ac1ee71a769e63299a1a6d878395a52feb46b8286fbe5bfb8c36f23c27
- SSDEEP 6144:aD8ln6nZctIKwgLcTX8mjdrYhM2nApS01tqnsgBpiPXFyrJcrwEH1FbO0SQTLWc/:aoM+rwr8hCNvVVOL8LW8IX6
- TLSH T120C47CEFBA22C065C1DABFF79E4745F9A929C00222532904A4A5673DA437F14EB70F74
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 bafb1913845e23f4a876b7b2925fd30b6260eeadaaa5b732cc5d3c170bc0a128
- MD5 c2047c65bd5974fea05cea85caaca859
- SHA1 3256e4f420926f5c989e9e941d5ebff1fe4700cd
- SHA512 f1fe90969ef075d670170396540f00ccdd14864351ea33fdc741f78c050c769d5eb516d91cd0e04d7d65ee5defbdf6eb449504ad09c29a4ea290b6b2b47d2481
- SSDEEP 6:l9bNFleLIls1uGo9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0Dqg:TLDEuX9F7LzmzsRmBEyPbBvOQ
- TLSH T1C972D8CD8F10A217C513433760CAD3950F38951E97779647166408605E52598B451E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 ad27b46920c5160a1f1ccc378356b11f108871518a5f8a9c41821db451e9135a
- MD5 30f0ee28d1b55920174d903016519abc
- SHA1 4d21b6ff7d42ed4bdd7686f35c4f335f4cab72d4
- SHA512 fe71e79bc88ccb599116ce81197506ed8dcfa8ee243a5bdd53ac9706b2ab7a9eba260bf76c387c00afa9832d91e797a3faedea1c78378d305d9cc194645324f7
- SSDEEP 12:TL6ET9F7LzmzsRmBEyPbP/DvJ+/0Fl6aL:TLlnHmz3GSP/DvJlFb
- TLSH T158722BCD6E10E703E127073A70CB93E65E38711E4367A65B3A6509689D531C8F152F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 70dc3354bf04f025e2036886205ec7627b6c91307419e3f510742c5d62d704e3
- MD5 5b5d93df6b056478747bb267873956f3
- SHA1 ae7eb792a9d0765fbb3afb6d182c2606644d5bef
- SHA512 3b5a87470b4dc675b40f86d13cf0f38e224e5c351680871db09e337d02fbd38fb3044624284bc47a0586669760c224eadb7bc8ff5db33d867b15d6873a25baf3
- SSDEEP 12:TL6UEI/9F7LzmzsRmBEyPbP/h1V49blqYFlqDvJ+/0Fl6aL:TL6Y/nHmz3GSP/h1V499FsvJlFb
- TLSH T1BC72848DBE24E303E2270B3920CBE3D66D38701B4763A75A3D260E2C5C83388A021F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 39f22ec4e987eb35c49fb89472729b05389c4f05a97b92877f48053314e25a18
- MD5 9be48b8bbb496cb330df323adaf09479
- SHA1 262db2f73dc061a64c5c17c3f036d6b47f2c4dc5
- SHA512 d89f291720ae1989bb5dae858b49688fa5c8f160a7d8152e0755c17eb2f2c9a980a8a8a299c37550ca09ab762b60f7beb673374f645da47f5a0ca22aabede549
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ab96501ab9baf09924ee7377617154343520306bcfca82f2e4db48440e97b542
- MD5 ef9a61e9b41aeefc14ac25e7c6dc6cba
- SHA1 694d38dad3954a06b27f4e002d40e16c166a202b
- SHA512 1a2721ab4797f690392c5f8c9fc5c47d19e95c3599942d83aeeb31a91dad99d0310294715baf05a066549cf90094d932d6810e30c739d57938e560c4f7aed4eb
- SSDEEP 6:7+/l9fn10g9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKJ:7+tMqLiuWdQoRmBEyPb6
- TLSH T1FC0222886B800812C82F1EBB90D483590E18AB188161CB97055008942C0F5CCACA8D2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 12a0540c5c2f8d74920d7e9f8483224e9106dcc4527d91f9090b74765d06288f
- MD5 3ce29421092b696a7c5b45a211adb81b
- SHA1 908ac33a1374de2d778bff16ac1c9988aad14bf9
- SHA512 9218f3f8e1d598d1b31171b771b70956d50c647fc9ae0fa7867147114015ddc35030935f31118efbff40b77c9a78ef2fd8354c8d6e574e19b3682b3c72572511
- SSDEEP 6:7+/lZPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKeH:7+tFqLJdvloRmBEyPbF
- TLSH T1AE91808977410913C5295B7790D5C3DD1F10AB198373CB57565408D57D47ACCEC90D88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 cafbef24b5c8a856c7cfb021e0d3f0cc4cd5668415da756542524591363afef5
- MD5 9135b8690be7aee7ba113db8e6f30544
- SHA1 5841d8398d4827ccbfbce7c1b17d156ff3abc306
- SHA512 17672e0395decd61d4bc57934443fd18b4fe2296d297528ae67b4bb38778981421c0869bd46c031b56f395de57511edb7bfb797a16dc31861aa36f83139061c6
- SSDEEP 6:7+/l95MzulFPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuKiRt/qh:7+to2BqLmqioRmBEyPbTz8
- TLSH T1A802128DAB850D17C51D967790D983691E20E71A8161CB5B15A108686C465CCACB0E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 4fa78ec2b50fbb66ff95706badcd5358155348e0e7c729f04edbae3b80fcb1ea
- MD5 b3974e4818dc6ca2820ea600c6141e07
- SHA1 a5b4d4b62a45575f91a2c84dd237f37f72beefbd
- SHA512 45f8e696b72505df4871be809ba30a0fed9d70e85537ba3826aab1a406d82d462f7a8cc51865a84f8a7f105ecd09407c1d79b05ea7a3f7c454d18151476d0576
- SSDEEP 6:7+/lRDg9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKN:7+t5qL8Ef9n9zmzrfRmBEyPbW
- TLSH T10F91EB8CCF002207C23B4B33B0CF83612C28631C833B9D032B980430AE430589082F89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 b565c7b70d1f91fb96d51a85367c44ea7f1bdbb9ea44d9eede4847b3af0883ca
- MD5 304ac51ef289aa4d494bd604ea6dbe6a
- SHA1 e702348f3dd5d49803b0eb5d43cea76f25a36bf7
- SHA512 280abe0033e9bd67afa9bff41b7701aaf24c26f4540e0cc264cce4e34bca24ca30897a22271a9ebf15e0a51df6216d64e9a2c6894fc915dc241613994fbcd68a
- SSDEEP 12:7+tzvJ+/0Fl6aXqL6ET9F7LzmzsRmBEyPbb:7+tzvJlFHqLlnHmz3GSb
- TLSH T1D0025CCC9E10E607D12B033E60CB83D65E38651E4377665B3A600968AD531C4B011FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation2223890873834487tmp
- Size 90B
- SHA256 756de1899c03929856d4465bef06b8361bee9b9088ff089acafbebfbcbc0823d
- MD5 c5eef7f28c0fe1db172c1500ffd2df79
- SHA1 63395364410b7ebe431239c819ba677f0888d054
- SHA512 4847d909b483bd81da9655511117f303b49858c9d29cde6de97808ef450a3de9474180ac226c6f707e09ffb223f842b6574b203ee6e667c529adab89b8a1c533
- TLSH T12CB012C54F70C343C4C6A20B1E8C95805D511C8104498B685A0DD04142C13E791039A4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation2472665409453688521tmp
- Size 561B
- SHA256 f4d2fb27333fd62111a9af4c82b4fbf464143b5edcbe29a1bfeeac73932ea490
- MD5 09a8dde86a8e66efeab6c79f6c1e48ff
- SHA1 9d7f2d3646e269807007b926dd1b8fef5aa8fc95
- SHA512 ec0efad4e6f7f4c2ee60eba8685647ec22134672e16614046204254d4d57b197f9b085cbb0c2448cc255e9ef9fce319959fd0acb558da061031c644d9a1dd535
- TLSH T1C0F026CD1B70C646D9D58342074CBD01447508B1B747047CFDCDC8D586597EB121BB08
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 e06ce0a0a092181b5c589da8378ab3a6eece4d0c37e917f2f7abf782aaecb810
- MD5 91744ad6f00895361cbac0a8cf077189
- SHA1 cdfec40606d9a3ef52945b7918e35ec9f85eba1b
- SHA512 42c4a9993d611640965f27d9efdf531196c6527e42a9ea162d662b8b8c5ffa6b859a044e26c440555f0e7483a9221dabf0d0a93a9e2b62826f0a6756c0b9fcf9
- TLSH T129E02600D6F25AE05D6F520E7FA800184F6FF39962BA049930F40188BA0AA85E2C7F0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 1f8fa1f5b650df4da52ef745bddfa9a35adff9ab811d949606ec6d8cb5cf0ae5
- MD5 15672bff40a8a1c7fcb64d8754d142df
- SHA1 09403b45761b1e8aa896b1dafa993882101a390c
- SHA512 9360c1e78864e517bc31fae8ae7c8152dece7d5ae44ed746d1c2b33770f8db84529f355e549b670ea2ef827a85613e286a9eedf8bddfdd505e7666594e058102
- TLSH T1EFE0D800D6F15AA15DAF520E7F9801184F7FB39962BA445924F80184BA0E685E6D7F0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 7f2dfdb7e24e790a17ca80d5adfdf138f18127bb8dcff2942e4298fbf54ebb0c
- MD5 2f44f03ccc5786320b9a463f50d86dbe
- SHA1 36a5d0f41b868106bb4f77fea8f27fc44bffe9fd
- SHA512 3b2e7cf9aa9a07e0e4ae474425a688ae59e4a23509185dbd55a51bd31acc66b119b05cbde7ed7c3f237d7d495268e4cf8ca700cdf46d422a0b54816d15d52dfd
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 2ac3f0a85f4ac50aef751659906d547c10947a287398bcbcbc20101ff669cf1f
- MD5 fb70b75243d7bd5db03de5deaca673b2
- SHA1 9f73b9e797b26024645fc40799125753f5b62f25
- SHA512 866d1b7215a63becdd64a37fe7c8d5a9061ca8051d1dcd42eb8535f048cf7af4d8e05271786904562126d39f641cf2937967eeeff00b835ca0e940a9a6bc6a4c
- SSDEEP 192:0iMMI1YHStidjnfWzzb83zS1+XD86u0ED:0HMkoStidjnfWzzb83zSEXD86u0ED
- TLSH T1C7C323CD0F496620C4B974B0A4D00BB1BD3FA12EE397D391759200B5ADD2923DA6DCFA
- MD5 SHA1 SHA512 SSDEEP TLSH