Analysis
- max time kernel
7s - max time network
1054s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
07/08/2026, 11:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Delta-2.731.944.apk
Resource
android-34-x64-arm64-20260325.1-en
3 signatures
150 seconds
General
- Target Delta-2.731.944.apk
- Size 205.8MB
- Sample260807-nc45bsteld
- SHA256 e415f9d94381c452e20bdfcadc209a80f1d73ad1a3531bd814a51f56fc8e80ad
- MD5 f56b5b6d47a38f2b22dc83c4ae558fab
- SHA1 d3332b62c69ffcc3d014fb44e3bd76e97cfcf34b
- SHA512 7786bc5ebc30bebe8f70ce4f08f1956eb214688d3cd4b3296e768f8002c85751fcbfe41785cf7576e6237824145207090d794faf44e80900c3399c9960cbcdcc
- SSDEEP 3145728:1n/8fipk8qZ7jfmNGJFX2Ssp38Dzt+jeEqZrqNdLdKsjWOuBa/vUb+ZW7L:1kKpk8qdmgmSspscKpcnWOLUbX
- TLSH T194A80109F2824E23DE2A4B399AB39795B735EC5D9B13CB6F20087174BE773C44E416A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.0.tmp
- Size 6KB
- SHA256 1ae4d11d0c683432485f3e05d375662e6fffa8c038cd744ad7d72f3a38ead601
- MD5 fb9cc7b53c202853897e88570e7ce6ab
- SHA1 38714a0871fd5fee3e4cb551eb129d23bc937a5d
- SHA512 a8bc1bf6a03a0022f020d786f8c2011a6b2bc4197adc4b3993565205e56d2c5532c044e5f51865c14af8430f27d7aa1994cbf60a92bbdd028cbaffc593b4ce00
- SSDEEP 192:N3EbzxnA3JhXy9KHt8+BsRTssg7lbmDAf:IxA3fy9KHm+Bsqsg7lbaAf
- TLSH T11AD15CA30F73248C0F03E6D2E55F4805686EA319EBE6C4E6DA5C3505C5CC6B932A25D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/f87270f3d2c5a0aa032011914bf5f84f.1.tmp
- Size 17KB
- SHA256 7537b646b1e16ec37ca559ac5efd68798ecbee4b5b56382a8f3645f74d1ca21f
- MD5 1a92384c7bc46c962fa056e53b027551
- SHA1 8e547d80b972e37dcbf6a4ae8bcb57697cd3c473
- SHA512 145e0a9330d34f57dccd5f3557ca4a453788a7098d8ee89968c6f5ea37ebbb99b7c579bc598352bfd8ea7d0e287876a87ff0be43c3b6a4fdc32ede0077ec8ea8
- SSDEEP 384:RVk3GgzObgr0rWSI8CUJhAleaQTIInzSsVGJxVElkEP:niPzkfBITshAleIInzDVGzVEiEP
- TLSH T13482C0594344A2ABB7F510D79B590BB8C48C7A4174B5E29CE642E74C4734FEBC2DE80B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 39B
- SHA256 2fc5f6c47f02675f3e0fcc473135e58f257dca4f1e499a35bd612d5e537f8016
- MD5 a57f2ec267ae22a5251405b03b49f34a
- SHA1 7905dcc38ef992cbf451970add385b94982039ef
- SHA512 9b384c1f005a89d06b26c42f32e84d4af43758c6ff8acb2b6e72a2271cbd5eb7361a0a181090e9dc403454ac03c3736d7cbad7673315e576e5906b09d2292da5
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/oat_primary/x86_64/base.4334.tmp
- Size 532KB
- SHA256 4030177f9bf5753b16887fb5a44e47808043cd4ca555da4d717ed59059c180ef
- MD5 02deb03751c93ea755063e61ceb8355b
- SHA1 6aae684e3b29e231532bd2dc83947e79b3a68b07
- SHA512 e760712357ab36bbd9f17c45397ead237be42c82e4dacd49c175e939326a0f693fe0a4f3498f5648ac88c7513b3921608e6492213848bdc1cd07585fe14d8957
- SSDEEP 12288:Zs5drvmZ26bCdqr5Zgt0T7kqjBM6davAcX:y5UP5E0PTM6dQL
- TLSH T17EC47CEFBA22C065C19EBFF78A4605F5AD65C01132573908A4A2673EA433F54EB70F64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 85ef4b5b9a44e5147d92e43eb960184d1ee71362e0ba1ec338eea00f310c2344
- MD5 cc02369cd1943fc37176b4a163744389
- SHA1 89568e66f0efc614dbdac118ce37e7988e8dff69
- SHA512 de61d07a550747a7dab240fa357ba70853c69d204858f2dede98af205ad3a88bb667c7ea6e3515feaf907e2334776920c21d8e31e3ceb09d311f5ca15ca69ae5
- SSDEEP 6:l9bNFleLIls1juP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDEju7LzmzsRmBEyPbBvOwVQ
- TLSH T15F72D8CD8F10A206C5570337648AD3950F78551E83779647166408605E52198B051E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 304154b0e200f05ba238fb84071bf72db63e048d37c2d6005dd57c37f39d7b09
- MD5 cfa76aba905bb9ed871c3867b3b62f20
- SHA1 752cf5a2b514cfecca575242ae1d232a8ae346d8
- SHA512 4c97763b0be8348308769640fa446ee1ee158bc85a65de25d8adcd647edc191b1b92a67adc57f6446b559156c568b7bfa42588f7d4f68b218b21c5ad32a32c0a
- SSDEEP 12:TL6E1b7LzmzsRmBEyPbP/DvJ+/0Fl6zpL:TLvHmz3GSP/DvJlFgR
- TLSH T16372ABCCAE10E303E16B033A20CB93D61E38611E4337960B3E2108249D431C8B022F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c17043c2abacdef193a477f0b6de86009d97be51d416e782b371617dd8a9e61e
- MD5 e4a985d75671baf6a363d3ea239eb32c
- SHA1 a4fe54eccec45380ebc3a602a78beba785aeab17
- SHA512 537181dac4329b99192b99afb216467f1f64c28e921f5d79b37b8913b515cb905e2921997f4955928840ce5f1930cbe01eb5c25dd8448eb0c6115a5ee777cc79
- SSDEEP 12:TL6UEA7LzmzsRmBEyPbP/h1V49blqYFl9TvJ+/0Fl6zpL:TL6kHmz3GSP/h1V499FTvJlFgR
- TLSH T1F0728B8DBA28D353E2BB073920C7E3C63D38311B073796063D264E2C5C43389A021F48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 6e73ffced8f7f2f02391e52e2e4f104d22f5c22a234b675afb6fef36db6d4803
- MD5 b27c076275da8decd7aa41bdcfa7b75b
- SHA1 d2c20f6f8aae6ee138e3db7c58e0b53896b44db6
- SHA512 b7b3445b09d9caeea703e5ac473e0cfd7efd14756ccd5df736f5c3672a28a588faae44688a6953197967ea138afdb8968fe4288d4ed4e9d22724e42af6944b4b
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 a7cd71cc0ea5b3b22819786e9fbc77e30ec9deee601b430a0f76d8944b729927
- MD5 90598dc2a73a8e6207f5b941fe2e4922
- SHA1 fcd572008628b7f4d91bbf9d8845bf5f4b321a22
- SHA512 31359eaa51a2a3cf64c7c7198dbc769b653e5af2d470e24571034f688f4c2251d39824fe9ebdbe7f0b5cbbd4ed91175e8dad0eb00988eb9dac637f9f14308cc4
- SSDEEP 6:7+/l93/gn1IWl/vg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKg:7+tBrWJvqLiuWdxBRmBEyPbT
- TLSH T1AE02C09DA3801813C83E16BFD0F5834A0E00E77D8171CB271B5008A4BC034CEE4A8D24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 8f458d25dc6321e8fc55f8b2dbb5c0c3068e97e49d5d589a0f66d61e0c253345
- MD5 eb7b699e9f3a190da1ea91277132c412
- SHA1 03d9541a619f35136ccea2675f8719e5b9e0bb63
- SHA512 be0ddef7a651de22fd4097ec238fac4b9179df65a77af6a082342b5f26756e0a7e1bbd3a76768eeb34fe0bb5dfafd61fc54d31c49c30263398116e242dae3672
- SSDEEP 6:7+/lPfSFPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKh:7+tPKBqLJdIRmBEyPb6
- TLSH T16E91C08AA3400803C01D1B77A0C483602F20B7248333CB1709A008583D037CCE490D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 aba7fe2dac639e73bbeb0dc64ebed53dc947773165ed6b58510ad353224db352
- MD5 d1a06dc8761dc06fc9754a7917f737f4
- SHA1 93fd0f0fb4f9bee0106b68ee73b787f37e36fda2
- SHA512 521375a42de3a05b4bf7f36a6909feed2e8041e2ee944741cc4f5805aec722f4ea750a6b9db28ea3ba3e9a9be0afeef57cf0028ef90804b8ab3d9dac1b646054
- SSDEEP 6:7+/l9n/lgPg9bNFlqhO1EAlOERX4PBX4ogLugMBX4suuK+ls//f:7+tp/l4qLmqBRmBEyPbLsXf
- TLSH T1920222A9B7800D13C13D1A7790CB83800E00A3158131CB0B196008A4AC036ECA890D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 73d5cd4d1df59db8c40ae21155917864040aeadae70bc3d726f3d5089796a7b4
- MD5 2987795a8697cb362007adeee49fee05
- SHA1 f2770d19c46f210e5327f751c5030f81d5f35957
- SHA512 b7c7e20b1bc47f197c2dcb6b4ab8ee2f2429bf78fefd5cb23aa93a7ef92b7a36493cf739de0b51fb18300c30e82281b03d4f10e5a21e88868aeb3ff0307d165c
- SSDEEP 6:7+/l5ll7vg9bNFluls1S/ElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK07o:7+th7qL8EME9zmzrfRmBEyPbS
- TLSH T1D691EB8CDF002B07C1BB0BB7B0CFA3515D28A21883379D032B980470AD0304A9041F80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 8c29fbec8638f0ab12a6134020b8d6aadf8e4b2db9ec7620182a23c853ee8b03
- MD5 4495e89093c497f0cc9033fec3d343f9
- SHA1 82fec5607795a653add69731c83e062efb414401
- SHA512 0a68b68994d3e036e6fe1b47c73c6e537ba12cc6fe322e6ea7b00829457f36802491b86d716a48d9d63735a8af38c15b76d6db45e187c7b8394aede5ab734071
- SSDEEP 12:7+tVvJ+/0Fl6zpmWqL6E1b7LzmzsRmBEyPbPzp:7+tVvJlFgcWqLvHmz3GSPF
- TLSH T138025C8DAF10A203D1AB033E60CB93D61E38611E53B795173A7109249D432DCB121F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation7109782381266597215tmp
- Size 90B
- SHA256 7efdc0241e9d475463a0d62a3246aa24d90e78a3ff758b0ff8ba0e9254efe015
- MD5 1b7e429244d7771529a334c9c93aaa4b
- SHA1 374c221fd96cdcb22cb7c53040c5492e5ec082ae
- SHA512 b2acc0797a700fdf41275e0cf3dc1b16263a3ac893c1670d6e6b6135c2be6138fd7fb124312e06dd48bd5e2b413973fbb63a38b2ce2b153a130b172fae572040
- TLSH T17DB012084AB4425AC599A2431C8EB3401D412441448E8B540A19D48040D12D09603994
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation7982010217576757237tmp
- Size 561B
- SHA256 d116d7cdd88b23a63919f44f0c0c9000ed5df32622cf2fef1f7010bacd8ef47b
- MD5 3e047fb11e44e9009a6fea682d41efe9
- SHA1 9c99e952a4da2e843d53e7464095838c3d7f4927
- SHA512 c23dcb1b1a53fa626679ffc9b315b43480afa81fd6b5076d1a808b6d6f3612ed32a5505dc0b6092b5ccd1b6bba0eea6eb74679dde87cc854f7d6047e8cf88141
- TLSH T143F0267551F08A0ADBD9564205CCFD451E5501AE1747C17DEAEBC8D4D1D499F301F54C
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 eea411cc3853a9bfa9b264a93db1b034362d365f288d90f24beaf4cde8b02196
- MD5 15464718a8e7f3ce662ce3bb2bfb2a50
- SHA1 d74a4375e5bcc0056a376913d6079dd0d7db3f07
- SHA512 30981d5d4d3486a1538f790c38b3e408559e17932591644deeb1f991d30d32034b1283333bee8dfb5605a4efdde6e65f4f7269b1ebd3b759dfb7259cd6d2d096
- TLSH T1D9E02600E6E25EA09D6F520D7FA400184F3FB3956276149A74F40188FA0EA95E2C7F0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 a4d78a20b0bcd0d5997421a494c193df2c3744f6a988d613c659482f98277f2a
- MD5 0a9f76ab2d57380a44d44159258f4389
- SHA1 224dea89f13d2c0603ec5c86457ecfa75a29d80b
- SHA512 fd4f0cf069c77832e393a8249bdf09201007361f817dce72afdb37c7d177384e1a10d31b4bc5adddda22025f607c8f58e6741415404e54ce9ee06467d45a3d12
- TLSH T12EE06800D6E11EA09C6F530D7F9400180F3FB391227A405A64A80084BA0E680D6C6F0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
- MD5 19e5c2bf2a99d61bc5ae4cc8952d1bb0
- SHA1 34d540bf135454e98068819b42b84411fdd62dbf
- SHA512 454bce38a46107d5a4c64d8757475da9ff6ee0025fa1a8212e613d787927cb209217c655ae4ec7adf884c723e5683f473e21df0a606cd40ada4245f8daf9c3ce
- TLSH T10C810454D34000F1D0D407F354D1130D0F07D1D4D5510F0315070041CC415470C74FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 fe3b02190d2afe565b93d53000409a9874c6f839a35ad46cfec6173cc007ce56
- MD5 34cd904d7c0fa346dbbbc34c687859d4
- SHA1 e1091d3b005e74aaa74ccaf85d73fcaaa0bf608b
- SHA512 29aa30af5d323d5b767caaea2c63b16b685edfb3e6900cf694b9b44cc5fde3cc4daf837a7329e1240a88491ba842b72a98e1fd2b3fc3740f9328419348844be0
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 8f5f8f5162f199f046652b6d2e1987157407bab9f095cf5d7eabe323120b566d
- MD5 ceab520a7445d56ee260dfbba66579bd
- SHA1 34fde2cdb29ea0bb0d08e62b0656c0ca62781506
- SHA512 572eca4770243fcf74779c0421662554c1db6b43dd97c1bd189e12d786097ec8c18c00c7337ea4ff63d1e69c0646016343205f2cbc82080ba52b5fdad0bf74d8
- SSDEEP 96:pA5xPyGiYA+U3vUhKnVEvXXCo4SSOFfUooB6+OtidjnZRWzzb8/KeKcK+zSOKz+k:6HrHtidjnfWzzb83zSJ+XD86u0ED
- TLSH T10FC3128D0F592600C89994F39DD00BE17E3E652FABD3D3D2659100F5ADD2A21DE29CF9
- MD5 SHA1 SHA512 SSDEEP TLSH