Analysis

  • max time kernel
    7s
  • max time network
    1054s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    07/08/2026, 11:16

General

  • Target
    Delta-2.731.944.apk
  • Size 205.8MB
  • Sample260807-nc45bsteld
  • SHA256 e415f9d94381c452e20bdfcadc209a80f1d73ad1a3531bd814a51f56fc8e80ad
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    PID:4334

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        f87270f3d2c5a0aa032011914bf5f84f.0.tmp

        • Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.0.tmp
        • Size 6KB
        • SHA256 1ae4d11d0c683432485f3e05d375662e6fffa8c038cd744ad7d72f3a38ead601
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f87270f3d2c5a0aa032011914bf5f84f.1.tmp

        • Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.1.tmp
        • Size 17KB
        • SHA256 7537b646b1e16ec37ca559ac5efd68798ecbee4b5b56382a8f3645f74d1ca21f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.roblox.client/cache/journal
        • Size 39B
        • SHA256 2fc5f6c47f02675f3e0fcc473135e58f257dca4f1e499a35bd612d5e537f8016
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        base.4334.tmp

        • Path /data/data/com.roblox.client/cache/oat_primary/x86_64/base.4334.tmp
        • Size 532KB
        • SHA256 4030177f9bf5753b16887fb5a44e47808043cd4ca555da4d717ed59059c180ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 85ef4b5b9a44e5147d92e43eb960184d1ee71362e0ba1ec338eea00f310c2344
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 304154b0e200f05ba238fb84071bf72db63e048d37c2d6005dd57c37f39d7b09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c17043c2abacdef193a477f0b6de86009d97be51d416e782b371617dd8a9e61e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 6e73ffced8f7f2f02391e52e2e4f104d22f5c22a234b675afb6fef36db6d4803
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a7cd71cc0ea5b3b22819786e9fbc77e30ec9deee601b430a0f76d8944b729927
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 8f458d25dc6321e8fc55f8b2dbb5c0c3068e97e49d5d589a0f66d61e0c253345
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 aba7fe2dac639e73bbeb0dc64ebed53dc947773165ed6b58510ad353224db352
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 73d5cd4d1df59db8c40ae21155917864040aeadae70bc3d726f3d5089796a7b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8c29fbec8638f0ab12a6134020b8d6aadf8e4b2db9ec7620182a23c853ee8b03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation7109782381266597215tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation7109782381266597215tmp
        • Size 90B
        • SHA256 7efdc0241e9d475463a0d62a3246aa24d90e78a3ff758b0ff8ba0e9254efe015
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation7982010217576757237tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation7982010217576757237tmp
        • Size 561B
        • SHA256 d116d7cdd88b23a63919f44f0c0c9000ed5df32622cf2fef1f7010bacd8ef47b
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 eea411cc3853a9bfa9b264a93db1b034362d365f288d90f24beaf4cde8b02196
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 a4d78a20b0bcd0d5997421a494c193df2c3744f6a988d613c659482f98277f2a
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 fe3b02190d2afe565b93d53000409a9874c6f839a35ad46cfec6173cc007ce56
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 8f5f8f5162f199f046652b6d2e1987157407bab9f095cf5d7eabe323120b566d
        • MD5 SHA1 SHA512 SSDEEP TLSH