Analysis

  • max time kernel
    9s
  • max time network
    259s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    03/08/2026, 15:24

General

  • Target
    Delta-2.731.944-02.apk
  • Size 205.9MB
  • Sample260803-stan9styhy
  • SHA256 78d081a5c01cbad0337d32a514143a91f07b275006bc23669b0c6b0c254228d7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:3282

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        f87270f3d2c5a0aa032011914bf5f84f.0.tmp

        • Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.0.tmp
        • Size 6KB
        • SHA256 3fa0eb6452dd1df1c5f021895022a2710e58c835b661511bee4f043d166a72d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f87270f3d2c5a0aa032011914bf5f84f.1.tmp

        • Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.1.tmp
        • Size 14KB
        • SHA256 3c04c1e2355d5541106843dece60f9fb8bdba56d01754f9bc6fd4796360da34a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.roblox.client/cache/journal
        • Size 39B
        • SHA256 2fc5f6c47f02675f3e0fcc473135e58f257dca4f1e499a35bd612d5e537f8016
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        base.3282.tmp

        • Path /data/data/com.roblox.client/cache/oat_primary/x86_64/base.3282.tmp
        • Size 539KB
        • SHA256 4e827cfd5a83d907afce46aae1db3a06cdf00a9516668b520445f5f358eb5629
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d82e397e3a975f248c15f36cb533a5a66050a7df57be4671dffb2d363a421dd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5463c5b21f5beb903c2301f73f6f5de05308cfe8a51d125910c00c06731f074c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 6e522a897968b45bb3a8fd8bc74ca32a37469f2f79f4cca160203a6d6e0b07e4
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cc4c7d08e5f8283ab271893df8cd925c4fa34d8029fbd59b4630d966d46cf8f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e8c9dc936120b41589a9a2426d88f6e403639ffbe2c0b915164f224f63fb0131
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5cb15202d0e14bd8e5d962b34fad25371407dcc7fdcdae7339934fd3a66b1e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e11b7256c29c7d57b5697c2c0349dc3619ce1c5f16c3e9ad5a228f567ea7ae49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a713aca5a05188340c00319b569bed2be79ac98196fa0a02bf3fbf3be3684b16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation2763905047322854110tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation2763905047322854110tmp
        • Size 559B
        • SHA256 ff2e51addce7874f88ede713a44b357d123fbf2c7e75d91f5727de11662800ea
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation7310910301854095614tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation7310910301854095614tmp
        • Size 90B
        • SHA256 077594d6270869ad8857831711b4cc32d65de98d811f9198f6840a35243ef132
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 27a316d9016f7217762eb2d9386a7c8ea37001337bdbff0d36dc0b6c66c3ae1d
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 88c5954ca59a169359b0a62913ff5409161e9b29b27e26b9e1082b292bf1ff69
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 d40973afb95ed90bd28e73fd473ab77ad8bd7e7a7f3229c6148c2c5c89523881
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 ed157a3c681fc2047bf80f011d8876212a61a74dcca5a06c6a10b1d5c4130a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH