Analysis
- max time kernel
9s - max time network
259s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
03/08/2026, 15:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Delta-2.731.944-02.apk
Resource
android-35-x64-arm64-20260325-en
2 signatures
300 seconds
General
- Target Delta-2.731.944-02.apk
- Size 205.9MB
- Sample260803-stan9styhy
- SHA256 78d081a5c01cbad0337d32a514143a91f07b275006bc23669b0c6b0c254228d7
- MD5 dee14fb89140b4ca99d13b20e333132c
- SHA1 f31837256890c242bf96c8213436fa05d4efd886
- SHA512 467351abb4d6d61bd4870b6621ac1710e264a5c730bf831a14ce9e256f4e5ee5b939f3481f9c9e42ee6705aab91f83bdd6ebccbe290b0890f979799b52779517
- SSDEEP 3145728:bD/jqiXk8Qf5PhmNGJFX2Ssp38Dzt+joJl4NdLdKsjWOuBa/vUb+LWghHAqy:bXlXk8Q7mgmSspsc+MnWOLUbOAqy
- TLSH T1E6A8F109F2824E23DE2A4B399AB39795B735EC5D9B13CB6F20087174BE773C44E416A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.0.tmp
- Size 6KB
- SHA256 3fa0eb6452dd1df1c5f021895022a2710e58c835b661511bee4f043d166a72d2
- MD5 ea95e3c45746a467140af300b3cd7f85
- SHA1 72b81ae4d977a004ead9e3d24be18a395023f771
- SHA512 085bc2e95739813abedead05cf17e43083b1eca4d98197676dada55140b7d522f8fd4597a9ea3f8712f1605a8eeeefcef88856ed26e6823e55a4f597f5306d09
- SSDEEP 192:N3sgeonWb7Qh9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:soWvy9VH3duhBKqPs5jMi
- TLSH T148D17D2A1AA0365B1F53E097F7B6AF2C3510A547E1F24D9EF9043126C6CCA1434DF4D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.1.tmp
- Size 14KB
- SHA256 3c04c1e2355d5541106843dece60f9fb8bdba56d01754f9bc6fd4796360da34a
- MD5 c9cfb6e4212568b09db7ba0a61b4fb07
- SHA1 274de6e61f7af019857add53f8a84bf922da8b62
- SHA512 d011671f332b5bdf60831c9659e69100022275c199d27ccb2ab145639acb1e3c18eb645de7598b8a3ed0d1f373eef2999780c25a618062631361ae25987741e1
- SSDEEP 192:u+C1d6flWjKobgjDBdXXuQLACBGUgqn0W2y7M0SDtHOKz4f7OVx6U4qxx8qjkrjE:BC14A8eIYk2NuKz27+6DqvXCj/+7
- TLSH T13862C024EA8C116E8BD608532D60DC72BCEEB84F19831BFE962DCE5E5A6D1AC471071D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 39B
- SHA256 2fc5f6c47f02675f3e0fcc473135e58f257dca4f1e499a35bd612d5e537f8016
- MD5 a57f2ec267ae22a5251405b03b49f34a
- SHA1 7905dcc38ef992cbf451970add385b94982039ef
- SHA512 9b384c1f005a89d06b26c42f32e84d4af43758c6ff8acb2b6e72a2271cbd5eb7361a0a181090e9dc403454ac03c3736d7cbad7673315e576e5906b09d2292da5
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/oat_primary/x86_64/base.3282.tmp
- Size 539KB
- SHA256 4e827cfd5a83d907afce46aae1db3a06cdf00a9516668b520445f5f358eb5629
- MD5 d9fd69c127746555885dfc55e8c9dce2
- SHA1 a6367fc9579b1299c2a57cd428cf822133773579
- SHA512 c5a523578287e2e6b5ae05e6c9887075d21d2ba9462f8d727e88b7ac7e82bb336eb8e56ee54a5cbbac3a63914c404eeeae572e9e674af17296f0d1b07de3f4cb
- SSDEEP 6144:bevRBIRpOkNbzvYoTD+3VCEyoSbhYxIExzLOwBUf0XfgaOxmtjha1rM7mRRijFNP:qXATV1bhhE/BsiYH1rMEijDE64lC
- TLSH T1FBC47CEFBA22C065C1DEBFF78A4605F5ED29C01222572504A4A6673DA433F54EB70F68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
- MD5 dd9a2fe8f7bc14471ac42c324c607a30
- SHA1 f88c5a77e00aec2c00147b84e0d346cab31804f1
- SHA512 f5edea485e7aec27b231844b38e7741e8cfc64ffca299467c5761093e8e173ffef1ab808db141519cba717fbc2d28265b5cc316e6221f6997433bb3ff0c4e0da
- SSDEEP 6:l9bNFleLIls1uGo9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0Dq3:TLDEuX9F7LzmzsRmBEyPbBvOwVQ
- TLSH T1F172D8CD8F10A206C517033760CAD3950F78551E83779647166408605E52598B451E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d82e397e3a975f248c15f36cb533a5a66050a7df57be4671dffb2d363a421dd0
- MD5 2430811adb4e39e904db6c45c4218956
- SHA1 c937f95bef6038f76b5ca0d95e60c84c5bdcb0cf
- SHA512 134b8919a3354e5a9a3a6617a92acd6922ddfad9d63f5129973ff1fa73539e8c83ccf1639bc9133e97cbf81e8552d8722e9fcd16f4975bc667d8ae3c31f30fd5
- SSDEEP 12:TL6ET9F7LzmzsRmBEyPbP/DvJ+/0Fl6hL:TLlnHmz3GSP/DvJlFI
- TLSH T136722BCD6E10E607E127073A60CBD3E71E38611E4377965B3A6409749D535C9B152F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 5463c5b21f5beb903c2301f73f6f5de05308cfe8a51d125910c00c06731f074c
- MD5 06ac494bf66b53ef111d70dee4d22c43
- SHA1 ca70a0c89412e3d65f6aa297485907dcebf9b147
- SHA512 32dae6ecec0e2688867574f18d10356a3bc524e8b10da0f82ca71933319bad0e6363669abc48551ecef40fd9299353125eba9948d95d94a8710604b7f9dbdb91
- SSDEEP 12:TL6UEI/9F7LzmzsRmBEyPbP/h1V49blqYFltLvJ+/0Fl6hL:TL6Y/nHmz3GSP/h1V499FjvJlFI
- TLSH T10C724689BA24D646E227073D20CBE3D72938701A0733D60A3A154B2C5C43385A021F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 6e522a897968b45bb3a8fd8bc74ca32a37469f2f79f4cca160203a6d6e0b07e4
- MD5 cf34eae99e21080f3a79df7e8f07acb0
- SHA1 089776b6a9fe0a24d72936154a06d28863389101
- SHA512 ef55d93730e7ca02ec3bc928209592b1a68cf1e721750e92716d7ec1453ccfd8950f4ea25c313b164333166c69f86927270080e708506cb73f34d9609f2d42d2
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 cc4c7d08e5f8283ab271893df8cd925c4fa34d8029fbd59b4630d966d46cf8f5
- MD5 ac46b72427ca169e9a7c5d8208381c3c
- SHA1 fdfd1f63f3e0db220fb1a72c0a0f9ea1acf48102
- SHA512 c52382e2c1249c258aa83ab815058198607e6c72f61cf461ebf126844d58f6f8db5cc4b5cf779f538ac2d756b20f931a25482bf772a1d1f4979c92149d306a3b
- SSDEEP 6:7+/l918Hn1Ab2vg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKjo:7+tIeSqLiuWdQoRmBEyPbD
- TLSH T1BB02228A6BC00812CC192A7798E483680D64A7288172CB87256008946C0BCCCE8E4D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 e8c9dc936120b41589a9a2426d88f6e403639ffbe2c0b915164f224f63fb0131
- MD5 5b737f2c25354b492f2af5f2d27deec9
- SHA1 f7a64da715f4aab3da0ce264b5525278934b8777
- SHA512 80979ef1b571776afb368f30670371b20c97d7d8234130967e347a582792f6bef922d10c8ca98edba9d162f44092e9f5d26603d50688c5c3369510854f1b617a
- SSDEEP 6:7+/lP6OPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuK2:7+tPlqLJdvloRmBEyPbV
- TLSH T16491C0886B400803C01A2BB7D0C683580D1077188333CF57196008943E036CCEC90F04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5cb15202d0e14bd8e5d962b34fad25371407dcc7fdcdae7339934fd3a66b1e6e
- MD5 ac6a3e523e55acb7a9f02b57e7860e68
- SHA1 da6b2996b90f5f02106fb4eaa691a889830645b1
- SHA512 673f82dce732f6959362b1027115241921a9cb7750155d52a5c54b2933e0b7a88638ba6f99902e9a9f4ff6186627667c5c359b3a87f6e436daa79aada967aef5
- SSDEEP 6:7+/l9eZFPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuK88t/mST:7+tQzqLmqioRmBEyPbh81J
- TLSH T10B022288A7810D03C0191677A0C883E80E80A3188129CB0B16A008A82C425DCEC90D94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 e11b7256c29c7d57b5697c2c0349dc3619ce1c5f16c3e9ad5a228f567ea7ae49
- MD5 296eb7c0d090b9080c09052cbdead2db
- SHA1 d9cac95cfd950c761ec17464406a4835bc528388
- SHA512 c7218669e8db6df2d00bb472d257008baf6acec71f81e54c53fc0a0d3f3f037d2362b732c3f9fbf3140149da7c1b90d191faa3dada879cc457d964cd04839960
- SSDEEP 6:7+/lq/7g9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKE9:7+tQqL8Ef9n9zmzrfRmBEyPbZ
- TLSH T1DB91EB8C8F202203C1770BB7B0CF83601C28A22D83379D0B2B9804B0ED434489081F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 a713aca5a05188340c00319b569bed2be79ac98196fa0a02bf3fbf3be3684b16
- MD5 0f1f9eb55e782284d7b7dc6980610aac
- SHA1 c77bdf45e9d229d8b60118b6f642d9c7d4c45d5f
- SHA512 6e2b12d58923d5aae310256c889ef0f49b24b3b35a70ce309bce917b920284ac1d49706c0f95aa9b8a37aa390683ce81b1660be937cc54678f06817a56e58797
- SSDEEP 12:7+tgul9vJ+/0Fl6hvqL6ET9F7LzmzsRmBEyPbL:7+tDvJlFqqLlnHmz3GSL
- TLSH T14E0255CCAE10A603E26B433E60CB83E71E38620E43639A1B3E6409289D432C8B012F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation2763905047322854110tmp
- Size 559B
- SHA256 ff2e51addce7874f88ede713a44b357d123fbf2c7e75d91f5727de11662800ea
- MD5 946da76d79dcf9b33c80d1d73f89818b
- SHA1 51cb48bc4a8cf5e1edc034da979edda065b7dc7b
- SHA512 fffb7ebe9aa3c46e4745b0c7441a64cfa13d74b44689455392bdabdbda471398a247ffdee2f75a5536e91d00e82c3a9842b4fd572110604aac5b52ed4680f209
- TLSH T1AAF020AB30109E9BC6CAE6C29E8CAC005E3128767E4A01556FEDC4B0BD45929A11B9D2
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation7310910301854095614tmp
- Size 90B
- SHA256 077594d6270869ad8857831711b4cc32d65de98d811f9198f6840a35243ef132
- MD5 50f0312b8770f97db19a4b9788651e40
- SHA1 1d2fd426fc4fa1139e0fdd36f21bfab022569e1a
- SHA512 fef19b974fd47694eaf5a734c2ecbb74be6958f228fb53ade5a8c63d2677aafeeda892c0c358bad172f812dcc7a9b876a6c3dd891b0aba5217b34faad8f4cff5
- TLSH T14EB012064630514189CEA3432C8CF1001E40188448499B054F1A9450C2A23D08143ED6
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 27a316d9016f7217762eb2d9386a7c8ea37001337bdbff0d36dc0b6c66c3ae1d
- MD5 575740f5043ab4e1dc3ec629c6dbfeee
- SHA1 4784372c8f897e3908582dd209b3d90437975535
- SHA512 29e232a05bb30fb68ce9191c6808206d7a60d65c91fe5caa177c20933be42d3708b56e52e995cf6f65f78620d03fdbd8eb583c12d2fd37371e7897d14a5d457e
- TLSH T106E02600DAE15AE06C6B120E7FA401180F2FB39561BA046971F40284BB0AA94E2C3F0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 88c5954ca59a169359b0a62913ff5409161e9b29b27e26b9e1082b292bf1ff69
- MD5 93a536e2211a3c7a75fb0ef95cd07fdb
- SHA1 9cd59bdd232c87f6892700f77a06f94501f20c1a
- SHA512 485eef2650b99db605d326fe6f3a8c93db662429aa57a7f6d2e7c400aa3a8f0c769478bba735bd0ed92980a54edcb4ab0c6ee4a1254d8a3a155828f48fbf9a36
- TLSH T1E0E0D800D6E15AA15C6B530E7FA402180F3FB39555BE446965E80144BB0A654E5C3E0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 d40973afb95ed90bd28e73fd473ab77ad8bd7e7a7f3229c6148c2c5c89523881
- MD5 088f00e549366b814c7b19958e9fb821
- SHA1 78ecf8b1264ade4ec3a8538216acb4a176b2ae3c
- SHA512 8b25006ee902abeba98c9dbbfcd52480060c4cdaf30badae336a8d64a361bce67c75015ceccbb3cd2153b1d85f223477a420b0eaaa5ca5acaab9cf5a1ce8c222
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 ed157a3c681fc2047bf80f011d8876212a61a74dcca5a06c6a10b1d5c4130a3f
- MD5 a71f55ba97a29757b8a145a63dcfe93e
- SHA1 f2be5d379a0211aa2de7411bfea5dba959427808
- SHA512 d59b247384f73b61ebf36218d4326e72b01604085cccccb733153869d8345d63ebb8916d70d14551e12a305843554036ac7b933725242046ca5528bf33284c18
- SSDEEP 96:AbPi2DeerkA6+OtidjnZRWzzb8/KeKcK+zSyKz+XD86u0ExV:M9aer2tidjnfWzzb83zSF+XD86u0ED
- TLSH T1B2C32F9E0F592610C1E964B0E4E50BA17DFE413F9393D39265A100B6ADC3A21FE29CF9
- MD5 SHA1 SHA512 SSDEEP TLSH