roblox-game[.]apk | Triage™

General

Target
roblox-game.apk
Size 12.6MB
Sample260925-ya8pvavfmf
SHA256 2bf79d8d223f27730ae02d72da6a2fb82c4ff3a32d0a0b5630ae3295c6f09b15
MD5 bff539d3e1c194b0765081f776bd585a
SHA1 34664e6f0e1eec2fde8083210ee657c0c6e04892
SHA512 e4ed1879fdb00795eeef25dc30e027af435c1e35a286e92e9c185854df1d4e1f70f4e1d8eba2d73c8be11c1a668d16ad39a349f7a40d53f37d4f0bf2be9b724a
SSDEEP 196608:csazgRcaRFZ0CdLjNx1sps/iOiUVYB2M6xoOzDXbE7dcHe++kS79r4JLH:Haz0HRb0CxtJQ2MSkf+nS70
TLSH
T162D6F10BF7494F2ECCB1B974158B633165125C69AB1285CB5A00FB283D73AF58F2A7C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
roblox-game.apk

File Explorer

roblox-game.apk

.apk 12.6MB

roblox-game.apk

SHA256 2bf79d8d223f27730ae02d72da6a2fb82c4ff3a32d0a0b5630ae3295c6f09b15
MD5 bff539d3e1c194b0765081f776bd585a
SHA1 34664e6f0e1eec2fde8083210ee657c0c6e04892
SHA512 e4ed1879fdb00795eeef25dc30e027af435c1e35a286e92e9c185854df1d4e1f70f4e1d8eba2d73c8be11c1a668d16ad39a349f7a40d53f37d4f0bf2be9b724a
SSDEEP 196608:csazgRcaRFZ0CdLjNx1sps/iOiUVYB2M6xoOzDXbE7dcHe++kS79r4JLH:Haz0HRb0CxtJQ2MSkf+nS70
TLSH
T162D6F10BF7494F2ECCB1B974158B633165125C69AB1285CB5A00FB283D73AF58F2A7C9
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

82dfdf2401ae1defa2863a77a5213af2d60d5e94378e1f509e583e4119598d1a

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

ST=Portugal

com.aptoide.android.aptoidegames

com.aptoide.android.aptoidegames.MainActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW

com.aptoide.android.aptoidegames.UrlActivity

com.aptoide.android.aptoidegames.SupportActivity

com.aptoide.android.aptoidegames.feature_rtb.presentation.AdRedirectWebViewActivity

com.aptoide.android.aptoidegames.play_and_earn.presentation.permissions.OverlayPermissionActivity

com.aptoide.android.aptoidegames.play_and_earn.presentation.permissions.UsageStatsPermissionActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.adview.AppLovinFullscreenImmersiveActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity

com.applovin.mediation.MaxDebuggerAxonEventsListActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

Android Permissions

roblox-game.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.INTERNET

android.permission.REQUEST_DELETE_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

com.google.android.gms.permission.AD_ID

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ENFORCE_UPDATE_OWNERSHIP

android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.VIBRATE

com.android.vending.CHECK_LICENSE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

com.aptoide.android.aptoidegames.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.READ_PHONE_STATE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

roblox-game.apk

File Signature issue

com.aptoide.android.aptoidegames.MainActivity

com.aptoide.android.aptoidegames.UrlActivity

com.aptoide.android.aptoidegames.SupportActivity

com.aptoide.android.aptoidegames.feature_rtb.presentation.AdRedirectWebViewActivity

com.aptoide.android.aptoidegames.play_and_earn.presentation.permissions.OverlayPermissionActivity

com.aptoide.android.aptoidegames.play_and_earn.presentation.permissions.UsageStatsPermissionActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.adview.AppLovinFullscreenImmersiveActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity

com.applovin.mediation.MaxDebuggerAxonEventsListActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

com.aptoide.android.aptoidegames.notifications.AptoideGamesNotificationsService

com.aptoide.android.aptoidegames.gamegenie.presentation.GameGenieOverlayService

com.aptoide.android.aptoidegames.play_and_earn.presentation.service.PaEForegroundService

cm.aptoide.pt.installer.obb.ObbService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.applovin.impl.adview.activity.FullscreenAdService

com.applovin.impl.adview.activity.AppRestartDuringAdDetectionService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.startup.InitializationProvider

androidx.core.content.FileProvider

com.applovin.sdk.AppLovinInitProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

roblox-game.apk