Analysis
- max time kernel
3s - max time network
130s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
28/07/2026, 09:43
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Roblox.Arceus.X.NEO.2.0.3.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
General
- Target Roblox.Arceus.X.NEO.2.0.3.apk
- Size 278.6MB
- Sample260728-lp1asstdmg
- SHA256 7221cad8e6c04b37ea94f02c58c7fb194f5fc8852776fe7e4a02a24d02fc1366
- MD5 7a8dbc44c4b4e2a94480b9cea4dc256d
- SHA1 2db85236dff6fcaeac7cccaaf153055d40175a3c
- SHA512 7e8ba91bee5c2aa1d0d89d25afe137d20ba4198f4a1694c0442a598af6c0865a19cf1667d8c7051cad9e4f797c39a3159d3a5c1954293baca34404c35afb42e1
- SSDEEP 6291456:Iu3vLZyR4vgO2S6RX4hoxnR/pL5S0tTpuIum+q:Iu3vlyPNSu9nj1S0tTpuxmX
- TLSH T1C8D81219F2824E17EE274B399BA392957368EC1D5B06D7BF300E72617FB73804E416A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.roblox.client - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/ee4a5e34e3383bbb0845d04ce9c5cf58.0.tmp
- Size 6KB
- SHA256 6ad20acee6e60ef064792ea75f31606d1bc6cdbffe3db86ccb849b11b28f0da9
- MD5 a861931cd8a6a34849b88fd488151239
- SHA1 880f0f84e014bb0b8a2f9a46a2db95875f986905
- SHA512 2dbc37d0257b7e9cce8e9a4bcca07f8e2ff61b66cb20f4cd6a37dfb686bcf4c30bd29c12f905105fd0c15a11434855854599d541cd1feca049248782c23c9aee
- SSDEEP 192:N3/IiUnq6b74h9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:ZHUXvq9VH3duhBKqPs5jMi
- TLSH T102D16D2A1B602B571B93E456E7A6FF1C3910B087F1F24D9EB9043015C5CCA1425EF8DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/ee4a5e34e3383bbb0845d04ce9c5cf58.1.tmp
- Size 115KB
- SHA256 80756bf0424b1d26c1446c2454d98ff3eb946edb2c794a5c8c31c692a426028a
- MD5 04dd76fcff09c8745f19ebccb73077cd
- SHA1 3200344cef0e9c7d0fbbf33165ed3423ab4a86e7
- SHA512 4b2c2df6438daa398b7aaf96a6f7f85ab1993ff852ae39b1d9ee46b7a7897cf8537a38606fad9eca65a3d302aae0abc96bf21e5d046dbb41acce2f50791cc608
- SSDEEP 3072:Tb7h2aqYCbefAGX6VwVvfT1ltUS7Nz+I1ZSsKA:Lh2aqBbe4jV03T1ltUVIv
- TLSH T19FB302B7D6666DA2EC9B3C631DCA0610F88219E1CDCBBD81C716F8D778CD2636471688
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 126B
- SHA256 23c1ae306294c4da8af608cc62a2079a0530c96f7174b4a1053ad0a7439a4535
- MD5 98b1b511baf8ba714e2e906baa8e7832
- SHA1 cbae685c6d5b2992ee1919601c4f432e8b35fb14
- SHA512 1bcffc33a0ae36d4c63959f610af605ea18222b72d63a6ce9f577d1849635343e0bac3f06d55dff06e4893e7f6d018a3463d620f978c3b3fbac4822f1cf9c33e
- TLSH T1CBB012C477103540D8408D32005DD474DFE9F20FF183CD13B183460743F72400000406
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2a340388f145288c8867ecda5c58991d8dd97363ac730d5a0251136491461a20
- MD5 8226b5c8e42bf2eb5cf43ad049baee4b
- SHA1 2b9e16b59135c2a51275c60a1258a0e3af8a0e51
- SHA512 a3da4d57f315e982a474cad7a762812b7461e3f8e83b49edff8afcd4ffc4d527557f5018e25c8549454b30dc7ea56144524008be4b373f53ac306e769c0dfd8e
- SSDEEP 6:l9bNFleLIls1mP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwVQ:TLDEm7LzmzsRmBEyPbBvOwVQ
- TLSH T10372D8CD8F10A206C617033770CAD3950F78551E83679647166408615E52198B051E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 386da90d8529a3e45569616b8b1a7aab6cc293dc1a9a8ecbcabedc572542624f
- MD5 e04de45d5668fc1ee10d19f3953d6c1c
- SHA1 c336ff478e6952ef30aa872ee6383da21224ca47
- SHA512 a7c442a4b172ba31b0629443b0e4a95cef6c826c3347584585d89174a9a24daafe587682c0d4c1eebfc3d5a2f86b288e26f9f9a1359210118736f602ea78b008
- SSDEEP 12:TL6Esu7LzmzsRmBEyPbP/DvJ+/0Fl6M62PL:TLzHmz3GSP/DvJlFL1T
- TLSH T1B9722BCD5E10E603E16B473A70CBD3D61E38611E4367D65B3A6409749E531C8F152F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 9fc7679c006360abca8e5ac22fc98affe8c9976fade29cfbf2d0a4b813e5d067
- MD5 7b89189fa46a72fd4b3314f3777da803
- SHA1 e4ae974b267ce26ddbf869f23373706b0f54a2b8
- SHA512 00dec5fcf36ae348790db969641d1fc2a15cf627bd4d80f134362b589c5265a454e360369ffe0896f9849755b8758155bced82d9d2bed43165b2459db9f1c44b
- SSDEEP 12:TL6UE87LzmzsRmBEyPbP/h1V49blqYFlYluUNvJ+/0Fl6M62PL:TL6gHmz3GSP/h1V499F8BvJlFL1T
- TLSH T15A722B99BA24DA53E26B473EA0C7E3D22D38712F0767D61639251B3C5D533C4A061F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 c7c5a9325abfa7eefebc4f32fa1d04d6b0cc40af03a82ba365fafa56f0e044b0
- MD5 f098fb3fa6292068eff87006be2e6d42
- SHA1 72995844502031469da930017e47c4d2dc3757b6
- SHA512 8e8ee2e2d5d8981b8ddb9722c96858fae311142dfd99292c0fa1f6813eaa20408ad0b72e0789aa11a930873b687138d772da0c41a8ff06a35e7e565c55db301a
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 abc4ba932696218fce731c811bd0ac1cbcc0a2e32c3719e3c73505ee2f7b209a
- MD5 c63a47a9ce36a1ad05c50018595b6380
- SHA1 f5de751f886e4cf90abdb11aab7da49b9182bc9e
- SHA512 74ab4a9226dcf5ee8ccf5fdab5692b2f7bf767c851b535b3f436fdd129f47b6fd46246917446eb050b3301d83cd372705ccc1015ac79ecc14cb7afe17096406d
- SSDEEP 6:7+/l95AtmHn1S/kWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKiA:7+t3cfqLiuWd7RmBEyPbTA
- TLSH T11102C09E6B830813C82ED677F0E483500D34F758C372CB4B05A008943E034CCE4B0D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 eaa5e5a9efaed4b6db7ed12b55bb50f7ea1f6cefcb2a7c07334aca335bd5c500
- MD5 e74228675355bdad1d889e7ab45bb8dc
- SHA1 6f59c24d67c45971dfe49a5f185f2c89836a81a0
- SHA512 c6eca548c64a28fde86cac7045d4fdcd788eef6eb6b8263887a15857064cbed84bf603b74e022725bd62600e1564add4c847710eaba6c91b19e6800411e91948
- SSDEEP 6:7+/lyHPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK47Q:7+tsqLJdKBRmBEyPb1Q
- TLSH T11291809D77C10913C519AB7B90E583545E106719C373CF57555508657C477CCE490D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5b7784ebe3a48162a552b7382a1db51bcdc18bd35239454fe74b2fe42a982b62
- MD5 5347fdf08eaf676fc57bdb15d4ae556f
- SHA1 af7a7291d2a87e4698939a09a9ee9a6ac4f3e147
- SHA512 22e1ca21112e7a139af94f98099c548fcee0af76eadd057d7cd1341a821b8eecd866a7d58fa84af3a2b345fba2de578ac99286d4e244d1f2f839e46f06b9a8d2
- SSDEEP 6:7+/l944Pg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKE/A:7+tVqLmq9RmBEyPbjA
- TLSH T1CC02C09C7BC00C03C05D5B7F94D8C3480E00E31982B2CB6B15600864FC8B6CCE8D0D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 e51045e33138c9f0a0e884558d797502e4b2cf7803a0796d5846dd5ef3c70553
- MD5 ac06b0f1f098f826df4e32835efb17e2
- SHA1 614a3e7aaf6fa1106494f1f4a68a3c691d507603
- SHA512 5d72550c22b327c5501727090927a66a3fbf4f9cb2b2980b4314798c639c1ed0d8f04ca48db1cb7c697a9bbfdcd8f5a43add8253d8390db98edcc055ffa6e8c8
- SSDEEP 6:7+/lZf+7g9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKXE:7+th0qL8En9zmzrfRmBEyPbqE
- TLSH T1F8912B8DDF112603C17B4B77B4DF93505D68A219837BDD572B980474AD435499091F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 adfd23dbe3fc70e21b881de64c62fb95d13fe783fd869cf995a611d6a7c02e78
- MD5 e715ed2c4ac5b61dd9696032483d92fc
- SHA1 0f7112cbee16cb4fab6e49e20c8240e481b03be5
- SHA512 07da440dce8421c23c87057eeccdb3f5d1d05b883494a4c4bd79a2b9e65b073f5076bbcc2aa0ead8253df0e4efe94d0dbfcdcc6a501a53826e7aafc94ae2607b
- SSDEEP 12:7+ttvJ+/0Fl6M62PZqL6Esu7LzmzsRmBEyPbv9H:7+ttvJlFL1hqLzHmz3GSvl
- TLSH T158025C8D9E10A703E13F433EE0CB93D11E38611E4367D5173A6005699D531C4F151FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation6271123748569878629tmp
- Size 90B
- SHA256 60571a59c51e0249f9e8f3d779e54d1adb7d9325e9a862b5fc5373eef1780032
- MD5 73f270a9a292a6c7459647bcf1485c69
- SHA1 0baf7352f586cb8f3082f6e5c2b11a328b602fa4
- SHA512 d62b0906a74e45ecedd1073ccba3e258c73a29f92494d61de3d9a665a6daf6f7ecf74aebf45f003a521fb62e100cad3f64c7b813013cb27a117ecf804c090ce9
- TLSH T1B5B012455F728261CCCAA3035C8D91016D4218800809CA494A0C909001821D49557AA4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation8362732270714326285tmp
- Size 561B
- SHA256 1afa10393ba1e78b51aa5f185b915e46d4f2c183fee6fb85276538f3f1bad489
- MD5 19b1977b0c93eaeaace5679118da4abe
- SHA1 6467bb5c0ab20efbc8e71cdac047b26036c347a8
- SHA512 4d1ea1ab165f90f90d7d60b0dfbc00dd801742bdd6a42c7028c20bd83b4f643cb7d62e436b5139a03c6a94af3c12781fd29fcfcff62553a7f194778e5b6ea289
- TLSH T113F026FAB7500A99CEDC92440A8C9F004D9B08E4625604AD6FCD54D06D74D29A6AF620
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 27447982e117033cb53d09e66451777b12276f6ed794adafb2e46a78ec944015
- MD5 f604dceb8e51f582657257b51341f485
- SHA1 f8f511ba3be45bf9562fc5519c5aaa1b029ab53b
- SHA512 3b714a9d9772bfe22919931c879e202439e4fec50249732ea2897917bfbf5ea54d44d02a78d7f9230fa5b8982792f7af5dae81129244bb2585125c4c9a97f909
- TLSH T1DEE02600DAF12EB06D2F120E7FA401284F7FF3A961B2045A35F40584BA0EA85E2D7E1B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 4c6b2db03c614357c6aaec943f22a035b07b19c1fdcb94f04dc34e907503b945
- MD5 609fd7cb29d0605016e3284845188061
- SHA1 e07e059d3508d0c1ab9279ec6d892cad336122dc
- SHA512 1ce9e6024af77a45edeeff817b8f39eb183cb61e70c5bf3b06a6482547b450f0e0b80247b3efdf951e0f07f8b8349414f9c7a02e1965dab245c4bbe2f6538e55
- TLSH T15FE06800DBF11AA1996E120E7F9401184F3FF3A510B6001A24B80544BA0E641E2D2A07
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
- MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
- SHA1 fee434f784e73cc7916322e949f727caf8363102
- SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
- TLSH T183810250534000E1D05446B354E113080F06D19496428B03550100428C415440C60E88
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 224a07fdc4501319ff53b6d83688d1904f2b14410a38386d134afa3759781534
- MD5 66a638d69743b01cf4ec2839409e08fd
- SHA1 d654bf23422fb772f7afefc14028b6ee6bfb13a9
- SHA512 4bff6ecbebb5ef98ccdb3021908c21185c57c39cde3991f5a9877499aa538d47efa3d1df9c7b01172bc4404c6ca192dcc6101efe5814d98e14115a87c2624f96
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 45d8e8ccc99d9e504dba9ed21381ce0c12995f7b4d34bfe4994193893ea5444b
- MD5 9f6735bd79c4d91217a2b1b7c02dec30
- SHA1 38ba268fe6d76eb596981fb825c98e1aa7426c6d
- SHA512 9ac823884f352876111521e1dccbe94f4f837c3f3cef4073dfb0bb45d39f5dd64ae93d7d1234c4f7e6ecbabf0856ecf8adef3c3c7cffc83d4730dfae199a931d
- SSDEEP 96:E1PPcHhzYwwj6+OtidjnZRWzzb8/KeKcK+zSqiKz+XD86u0ExV:2CaNotidjnfWzzb83zSY+XD86u0ED
- TLSH T1E4C3358D0F5A2A00C0BD5BB0D5D00BA17D3E422E9793F3E265B140B5ADD2925EF26DF9
- MD5 SHA1 SHA512 SSDEEP TLSH