Analysis

  • max time kernel
    2s
  • max time network
    33s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    31/08/2026, 22:23

General

  • Target
    Roblox.-.Arceus.X.v5.1.5.9.apk
  • Size 136.0MB
  • Sample260831-2ba2razdnh
  • SHA256 11345b4048f42640fad916b4c39a39843afda9f1f3547bf09e2da23c505eeffc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:3346

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        6ba705ad456a21538782e5f04aa623a0.0.tmp

        • Path /data/data/com.roblox.client/cache/6ba705ad456a21538782e5f04aa623a0.0.tmp
        • Size 6KB
        • SHA256 6a07d47ff2e08aca3581cb55f1ebd4589d91997a89bddd3812ff00171ef05a96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6ba705ad456a21538782e5f04aa623a0.1.tmp

        • Path /data/data/com.roblox.client/cache/6ba705ad456a21538782e5f04aa623a0.1.tmp
        • Size 15KB
        • SHA256 7a5ccc68a550136c80cbda9394677273ef1b270efa2a59acd1ee1478e70d0b3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.roblox.client/cache/journal
        • Size 39B
        • SHA256 436e87a7e2489ad3431091d4ed532d40006cbf5d467350cffeba9581f4e0b38b
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c8dff96ef7dc2cad93448ceadccb1f04c2d068364cc705d932fd7807b527a832
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1486100d3564059cf82cc466c7a96508625565795495a1e893d4d720c77a9236
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 8d13065983d7f270d5209d55d4ccb887b8e6f89e03ce2564d692dbd4b58354c9
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9a1679371485725ea0dc8e06cc4fa67606bf89b17e4eef2733599038575ef27d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 2064a96c45cec15966919bbad4e6a07b12c1aea438316b578fd73cb3ddcc87de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b4d7c0229174adc02a1b9eb4c3f95deb2ef067c85b444e180d1a7855a674ea40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 2103d0026fc4496d0977e9412cf835f4f9d43d629ef580ac1e2cc80131cd882c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 40792e6e0e54a663895fb6467443458c1366584b7421724db8402780d1a4a4c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation6415732352832848514tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation6415732352832848514tmp
        • Size 90B
        • SHA256 60ca107ecd415f5d787139c863b3fec1858e44b0ed24d8e4bf2d97c28515d40a
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation747921678076106425tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation747921678076106425tmp
        • Size 562B
        • SHA256 31dd3ae3ae05769c0c359deefa960fc3cdc7126bf94f0de3a930f53133568439
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 21f4c3e282d775b680b19894a217d0d2d38acaf585b8d7274c104e22c4732a7b
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 67152b939cbb18500f5d7aabff4ce1ac6f80a32c805456a5a6854fb7d34e58ea
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 51cf0664a0a8d4014460912f4667f5b573eab790df0f11dcee9d16ae91d2bc4d
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 f0e0684d64ba4395001d314491e285d4a076f6ec402ef71b7d750a2cc64b852a
        • MD5 SHA1 SHA512 SSDEEP TLSH