Analysis

  • max time kernel
    3s
  • max time network
    130s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    28/07/2026, 09:43

General

  • Target
    Roblox.Arceus.X.NEO.2.0.3.apk
  • Size 278.6MB
  • Sample260728-lp1asstdmg
  • SHA256 7221cad8e6c04b37ea94f02c58c7fb194f5fc8852776fe7e4a02a24d02fc1366
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    • Checks memory information
    PID:4199

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ee4a5e34e3383bbb0845d04ce9c5cf58.0.tmp

        • Path /data/data/com.roblox.client/cache/ee4a5e34e3383bbb0845d04ce9c5cf58.0.tmp
        • Size 6KB
        • SHA256 6ad20acee6e60ef064792ea75f31606d1bc6cdbffe3db86ccb849b11b28f0da9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ee4a5e34e3383bbb0845d04ce9c5cf58.1.tmp

        • Path /data/data/com.roblox.client/cache/ee4a5e34e3383bbb0845d04ce9c5cf58.1.tmp
        • Size 115KB
        • SHA256 80756bf0424b1d26c1446c2454d98ff3eb946edb2c794a5c8c31c692a426028a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.roblox.client/cache/journal
        • Size 126B
        • SHA256 23c1ae306294c4da8af608cc62a2079a0530c96f7174b4a1053ad0a7439a4535
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2a340388f145288c8867ecda5c58991d8dd97363ac730d5a0251136491461a20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 386da90d8529a3e45569616b8b1a7aab6cc293dc1a9a8ecbcabedc572542624f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9fc7679c006360abca8e5ac22fc98affe8c9976fade29cfbf2d0a4b813e5d067
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 c7c5a9325abfa7eefebc4f32fa1d04d6b0cc40af03a82ba365fafa56f0e044b0
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 abc4ba932696218fce731c811bd0ac1cbcc0a2e32c3719e3c73505ee2f7b209a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 eaa5e5a9efaed4b6db7ed12b55bb50f7ea1f6cefcb2a7c07334aca335bd5c500
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5b7784ebe3a48162a552b7382a1db51bcdc18bd35239454fe74b2fe42a982b62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e51045e33138c9f0a0e884558d797502e4b2cf7803a0796d5846dd5ef3c70553
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 adfd23dbe3fc70e21b881de64c62fb95d13fe783fd869cf995a611d6a7c02e78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation6271123748569878629tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation6271123748569878629tmp
        • Size 90B
        • SHA256 60571a59c51e0249f9e8f3d779e54d1adb7d9325e9a862b5fc5373eef1780032
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8362732270714326285tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation8362732270714326285tmp
        • Size 561B
        • SHA256 1afa10393ba1e78b51aa5f185b915e46d4f2c183fee6fb85276538f3f1bad489
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 27447982e117033cb53d09e66451777b12276f6ed794adafb2e46a78ec944015
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 4c6b2db03c614357c6aaec943f22a035b07b19c1fdcb94f04dc34e907503b945
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 224a07fdc4501319ff53b6d83688d1904f2b14410a38386d134afa3759781534
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 45d8e8ccc99d9e504dba9ed21381ce0c12995f7b4d34bfe4994193893ea5444b
        • MD5 SHA1 SHA512 SSDEEP TLSH