Analysis
- user interaction
yes - max time kernel
4s - max time network
33s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
07/09/2026, 02:50
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Delta-2.736.1408-02.apk
Resource
android-34-x64-arm64-20260325.1-en
3 signatures
150 seconds
General
- Target Delta-2.736.1408-02.apk
- Size 154.9MB
- Sample260907-dbrshaed54
- SHA256 15d063a9659ca1789e5878db23ab6fa79dc25be62b790e71c455722c4976cc70
- MD5 e4eb3d28be6c44f1bdf0e56985fb7252
- SHA1 ff92896d42d93faf59965aa30dd7dc160ab4ee3c
- SHA512 d74718903d1180b12928c3e4f4235f3ef88673ec9e0926fa012c50903ec428aedcceea42481726521cc78df655bd30181d47203bd88cf11a121259076285462d
- SSDEEP 3145728:kfoxHdJrmuOl0Rs5xALFBoKVuGK2e3mxWNALw5Nu:kQNLrmuTBJK2FUfu
- TLSH T19A78E009F6824E23ED6A4B395AB39781B735EC4D9B07CB5F20087178BE773D44E816A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/f2645c097ebefb78215c354e46dd18bc.0.tmp
- Size 6KB
- SHA256 7af888e6dd8ff03f2af7ad68029414cda569584faa0deb56413b0b7d4226fc90
- MD5 34a6d3443819b3efb8f7c458d7bba3c6
- SHA1 5b0363f16a35dcebb2dedb593664941fe57fad9e
- SHA512 3fee3a50797a02893fbdcedafbf0db5932c6f4f390d5227c979adc8eeeec19d48ab7ccba594ba95cdac628036053713e826cf7a6422673ef74b51842d642d81a
- SSDEEP 192:N3CG1nr7b76h9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:0qXvU9VH3duhBKqPs5jMi
- TLSH T1FAD15D2A1B502AA72F53E095E75AAF1C7500B58BE1F18D6EB9147016C6CCE1424EE8D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/f2645c097ebefb78215c354e46dd18bc.1.tmp
- Size 16KB
- SHA256 772007d4dd336ac2f5f5dfa6308236b4ac541755089000233216d3247e04b93b
- MD5 aa5c436946622e607e5282ca9a86b6e1
- SHA1 8b842fbda1d31701e6b1677826564d5260d0abed
- SHA512 536388456da330ffb710a9c1405abc8e799777faa4b7d7eac12a3abc42e9fe66aedb99efe0b06b1cdc542cccec9943ab1197f7497a3de3bae3a9608f133e85f2
- SSDEEP 384:orzxb6mxdG2O+gubNMVXi9jf5NSQIME0LdSNCx+/92cmuzm8FL0:o5b6mxdO+DNsXA5s7ME0xke+/YA0
- TLSH T17172D04A65835C00F168A8F2E5093263779BA47677270DD8FE6483AE6BA101ED450FBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 39B
- SHA256 7928784e1803945678a88cb4d7212af45941c47b22b5cab9fe8748b361a38ea1
- MD5 b81e46d3502d3c3860c4ffe229ba9c7f
- SHA1 4063ce9c69fd662e369c011b5abc5b3abd470186
- SHA512 14a782b756c8974cd67cf84ab2cba535c01cdf395ce2436a163d0f1b7f6b47677e44c768669f85c04c9497d5f0ac334b84d79f4710cd1a1975ecbe914aa512f8
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 85ef4b5b9a44e5147d92e43eb960184d1ee71362e0ba1ec338eea00f310c2344
- MD5 cc02369cd1943fc37176b4a163744389
- SHA1 89568e66f0efc614dbdac118ce37e7988e8dff69
- SHA512 de61d07a550747a7dab240fa357ba70853c69d204858f2dede98af205ad3a88bb667c7ea6e3515feaf907e2334776920c21d8e31e3ceb09d311f5ca15ca69ae5
- SSDEEP 6:l9bNFleLIls1juP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDEju7LzmzsRmBEyPbBvOwVQ
- TLSH T15F72D8CD8F10A206C5570337648AD3950F78551E83779647166408605E52198B051E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c4fed5a5339cc0164618995261a85be90c0689f4ae881b102dc3b9f3813171d3
- MD5 d1a44bad1eafdfb78aa37b833863c31e
- SHA1 939f60db05a0ee0a1961deb854e542d73ad634e8
- SHA512 9de951b81b3eea71c50b53b5c3f03c4947a3f5c0e890d28e84959243e1521a4f2630ad755eae8724e31227410693cf0e7948d47d6f8d94b61034174176544626
- SSDEEP 12:TL6E1b7LzmzsRmBEyPbP/DvJ+/0Fl6bmBTL:TLvHmz3GSP/DvJlF7p
- TLSH T1BB722BCC9E10E603E167073A70CB93D61E38711E4377A65B3A6509749D532D9B152F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 0c680a9db6d79a6fbda0b17eeeccf8dee37f0da3f67dd55738744cda703c4b75
- MD5 897025002996ad384c631472b66d2d36
- SHA1 5ccd577d3b0ce0286e672275084de1a6f0e94b65
- SHA512 459ec3497d43598531a55083f1ebbb32aeddea599a690ad53a815591c3cfad3782ea9acab8b4eb4516f7a6998915063a56a52c3ad73239f793598785716091e8
- SSDEEP 12:TL6UEA7LzmzsRmBEyPbP/h1V49blqYFlStfbvJ+/0Fl6bmBTL:TL6kHmz3GSP/h1V499FGDvJlF7p
- TLSH T196728B89BE24D253E2670F3920CBE3C22D39301B4737A6467A260E3C5C43395A061F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 e384f66134b63311bf24ac3ec35457f06e6b6812c2d628f60b47e9629f72d6be
- MD5 3bc7721c248aaa55b2fbe6f84ec7a3fb
- SHA1 49d17e1161e975b39f86330239b30b448387b72c
- SHA512 be349d3f1c63fbf0c2e4c55fdb78f9530c36481d6d7f77d4bb407defa3ff52e8b7460db9e31f04ca19f310e56695be62107e370856031800115282ba9606789c
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 6339548cdaee917b15c745c365c561f8d9fbdae80efeab7fcd09edaf70959de3
- MD5 81eef81660d02869420719b7b07e9f93
- SHA1 4b94731f039b01236e8a322442e30a2cc2727721
- SHA512 3e3291e282101df240e541e0370db2bd0c6537bddf184c84be1cd3f667a5350c01418e65fc118d42b9dc8a21864872f88d17b75a3a94f223d98378ee82ecdbef
- SSDEEP 6:7+/l9AF4n1Yycvg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKd:7+tK7RvqLiuWdxBRmBEyPbG
- TLSH T1AC02C09CA3800C23C81D27B7B0E4C36C2E41EB198271CF17065008D4BC877CDE4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 f192c93027487cf320eab2cae641c9d56d1dbefca2303d87fa01a93a5f13b2ce
- MD5 4b1ea788f1b183a78ca9644fcf522934
- SHA1 c19c78f42fa4ab4b06491cce2c107e85e955ad1f
- SHA512 85e8253f4a420ed9334f8a1eb913406e61740b27af8ebacede122e2f5248477341ff1e06c7791002a28c661a48db564088e4d21ae2a65b0a79647ce2849f52a6
- SSDEEP 6:7+/lcmHPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKI:7+tXvqLJdIRmBEyPb7
- TLSH T17591C098A3410803C0199B7790C483400F1077248333CF1B059108643C877CCE4D0D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 20c1c29c2f3a1fb3231aa131383f0c3ea0b43d13a644edfaaf3218ca1ff474e2
- MD5 38ae4c1f9896511fab78d8fef5368ce0
- SHA1 6326c6e681625a4da1277169797c45912a7710fa
- SHA512 a4060dd469f126b79a76930e03b168cc47382858fac4d31131ef865ab9c11c05bacee88506a5f02cbf31c674db6415acc86e7d8d44aec6c1a472820fe08085b8
- SSDEEP 6:7+/l9rLPg9bNFlqhO1EAlOERX4PBX4ogLugMBX4suuKw9/ur:7+tJDqLmqBRmBEyPb/k
- TLSH T10E022288A7810C23C419167790CC83410F00AB34A233CB47896008642C024CCFC90D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 b7be30d64f0a9730b0d1b91ad36dd0e27c6843c21f13836a21bf60ce28c83ecd
- MD5 df0e489855e6678522531d0ac6fe8090
- SHA1 e4d21bf64fb9924e327cfda8746a67ffb57db605
- SHA512 061ff0f97d890752ceb48ef711dbf454fea2083a73004e99f83d73184003b6850189a3d6b5565e9078985eddac609e9efe5fa0e1ac81067457348e464dbdde95
- SSDEEP 6:7+/lbVg9bNFluls1S/ElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+s:7+tbVqL8EME9zmzrfRmBEyPbZs
- TLSH T1C091EB8CCF002203C2B70B77B0CF83401D28A21883379D032B980830AD0304AA042F80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3906d6893e052dad2c518be9ea7b976c314250e845577349dbaa12334469ea83
- MD5 3cbe9c1230ad49ed4dc90b1c322f5d6e
- SHA1 65df5f3ef97b85270488c0cd2463a20446bbcc7d
- SHA512 9778e8b7eeccf70a2f82d65ff08aee1f5b9c1a074335dd6b067b6d59a2ebb149bef1cccd84ab092dac18f97157e0f0c71eed1a4af5bf2043163015fd11322ff8
- SSDEEP 12:7+tcvJ+/0Fl6bmBT2lJvqL6E1b7LzmzsRmBEyPbZ6:7+tcvJlF7UlJvqLvHmz3GSE
- TLSH T13202D58C9E10F203E12B0B3B20CBC3C20E38220E8377A65B3A2009689D432D9B062F90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation3038857503025032590tmp
- Size 561B
- SHA256 824a1fc1032cfd519d302c529328a694cbb05ffb83de0e6f4862284034c1a491
- MD5 d9056f0b2e6fd4b4c925f0664a413f2e
- SHA1 53eb86bd3eba3282b38ac721b3cec5ca97c07635
- SHA512 be4707d2f40f763b5a6c0b8b2700b7d50f1031beeb98a212e0b1bb09f7a5f394ed559888576151c91c4d8f31522347374a6320a6a85d0dfbda0ae3b6f9a04d5a
- TLSH T1AAF026DA71500B4AD3FD9301167C7E7C6A3916F12D5909947E878984D9C4ABDF35B440
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation7090978309326292254tmp
- Size 90B
- SHA256 badea430632f23e56f9bca4e79e52fec65228cf4abfcf24b5c7a80d1f474fece
- MD5 18c7090d3f872a3edc7bbecad1e24bee
- SHA1 d73b8cab207e3c26b94695a02d1025b67243f862
- SHA512 7b536d2ea6d69dab7e9bebc17df27726e072c01000214d0abc66ff10cfd6859f92c69f9be3fd9955ca585ee2a77702c9d1d1913d3e5f192583d7bd964b39a18e
- TLSH T187B01245AB304292858AA3071F8DA1802F602840481E8E054E08918040C13D4B1539DC
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 fc187b3d204bd9f78eee4913db7b33b05613478e2fe21cadaff1a22370b97372
- MD5 eae3e777e2362cb59d9d4de7c7235d47
- SHA1 c2b49ae24be2f886224cc25f6e8af2f03f27d8eb
- SHA512 2a292ff379567f54a35745ede38802513a33aefd706a3d2e058eb4dad0c88f97ab4861a6ffd79c6872db93072d906cd1b9059803994d7718a0bbca7681b215ce
- TLSH T1B9E02600E6E25EA09D6F520D7FA8011C4F3FB7956276549E35F40188FA0EA89E2C7F0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 7dd0049908b10c73e6dde8ac814d2430a580573a6c62259e18e13232c757c959
- MD5 234bf587487d0f2556d5900651eca828
- SHA1 26d0c81ce8fe3dd169da5512c3b2d6cf67234e84
- SHA512 78fb073a5a9e57552ea1a70f51cf30b89aecf000cce39ccb55f723253d86b681e9ec2514ee27ccbf1ba931aa819e2da2a8512b0b835a0ff71eaadcc9bd22d1b5
- TLSH T1EDE06810E6E11EA098AE520DBF98011C0F3FB39122BA405E25A80084B90E684D2C6F0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
- MD5 19e5c2bf2a99d61bc5ae4cc8952d1bb0
- SHA1 34d540bf135454e98068819b42b84411fdd62dbf
- SHA512 454bce38a46107d5a4c64d8757475da9ff6ee0025fa1a8212e613d787927cb209217c655ae4ec7adf884c723e5683f473e21df0a606cd40ada4245f8daf9c3ce
- TLSH T10C810454D34000F1D0D407F354D1130D0F07D1D4D5510F0315070041CC415470C74FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 59c3bec89463a9c66894508eeb6a87e30d71af9486ecb635728ca3aa559b482a
- MD5 81d36138864bdc77e178f7b4ab277dc0
- SHA1 bf81174e7464d539cb7241a2361606a2cd64afb5
- SHA512 2444b821c64158cac0f03b8de2b2d6646af3278bfdac17296a7313f20d28992b4ca8b085c48e6c389556e6aae985d0c7b36987e40b6edf111fa01159e59023bb
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 dca4f11cd105847d2aea9c8a7986b21102d0ab1a900b66f75b342fe48dec8f07
- MD5 328dd1ead16ccc4fbc27bec3cab2fb70
- SHA1 523bc3356abbed067d2a8f8f1abd0180c3163fd0
- SHA512 8a952f70c6c98c628b016e09207dc3219135aaa107cd7c8a1feaff70c68be4213c495ac1f98b02583b5d654534d43d02eb2c95a08499bf484943d7b280ee6f7b
- SSDEEP 96:BaxP4eg5HUhgq26+OtidjnZRWzzb8/KeKcK+zSnlKz+XD86u0ExV:Bg41y7LtidjnfWzzb83zSm+XD86u0ED
- TLSH T1E0C3228D0F5D2600C0A954F1D4D50BA17E3E492EEBD3F3D2A9D100BAADD2921D929CFA
- MD5 SHA1 SHA512 SSDEEP TLSH