Analysis
- max time kernel
5s - max time network
1754s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
17/10/2026, 17:03
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Delta-Executor-2.711.apk
Resource
android-x64-arm64-20260325-en
4 signatures
900 seconds
General
- Target Delta-Executor-2.711.apk
- Size 176.5MB
- Sample261017-vkn7eats9p
- SHA256 a700e160746b6d280a0bfccb7c3cb3824f7cb3bcb446a7230593e683f1e46e76
- MD5 39112e601ad06fec437eb37bd3559351
- SHA1 e22a009062afa661ed3ed61c4d2c9b8f9bba0410
- SHA512 88a2916320fe270022b2d02778b2296e29bbb327ea2f86802df35d9a8791743f72971d50d23a979e9373dea5f53125b7a024eda57e7f89e5bc8cbe7f0c24e19d
- SSDEEP 3145728:Yt6gkKlXLTlteudAab+Gpc5GmY5vWecWfiFa4Bp4Gm+81Pd4SgDtZ5:AvLZ9VO53uK3mB+y41Br
- TLSH T16398E019F6824E23DE5A4B394AB393857735EC5E5B07C7AB300E7174BFB72840B816A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.roblox.client - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/035d445170b57ac73c929294768d58e2.0.tmp
- Size 6KB
- SHA256 f1e559c6371b1b3da8919cdb6beb556560f9b6827e29a42e8c6e9149eb3b6dd6
- MD5 3e1fe230cc12fcf0c687ba6c46aac5ac
- SHA1 dcccdabcc414fe71b46b3f25a40d9bec63b9ff91
- SHA512 49aff1f6d3651bfbec2b53c87a0af05afc988065293f39a0faf04df072f3e53557ffe00493aeaf9dd93f10d777354523559c280184319f4c14d0db05581e0f01
- SSDEEP 192:N3ivnPSb72h9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:mPSvo9VH3duhBKqPs5jMi
- TLSH T13AD14C261FA02B772F93E0A7F65AAF1C7511E58BF1F14D5EB9043016C9C8A2424DF8DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/035d445170b57ac73c929294768d58e2.1.tmp
- Size 72KB
- SHA256 eb8f4436e66df445a1318b041999dce26ed0b9ade19b7c9f6e1161dcfe2bebd5
- MD5 1f8343ef81894374f66b81d863a8e9cb
- SHA1 b5610509858d4467c51ed6f122bff0563cbd4f25
- SHA512 fc4b827b74f792b66a3a7cfd27346f3f752187ff2d0705a2e7e69481f519b126fe3dc6d4ccecf1d13d5ac3c841d4de8fd0633595cc07a917d06f8b42767f1a2b
- SSDEEP 1536:L1T2C6EI4KNN/+CScFlMWA+c4E+9hcTYOrrV:0yCkvcFRnmYs
- TLSH T13F7302E2BE2C57719F418FBB00CDC3B548FE41A9D600C5645EA21B1A984163357EEFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 1a2d5dd0f486021b5c66fc075ab93fe45ad860cad1a2bd41b42cbba01b9539aa
- MD5 a71ec173b86c77e2ef0fb606ade74935
- SHA1 5afdd53524c1f0c8e68a936898fdd25896aaee9e
- SHA512 2efb7f7a0c91e5874bb701f23cabe48f367ba35922b8e13cfd0e68db3fcf44534035718510a9c88e7e60369a13092f189e2d79e9c597268a50480da97fc745aa
- SSDEEP 6:l9bNFlqls12tFP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOw:TLwEw7LzmzsRmBEyPbBvOw
- TLSH T1657220CD8F106216C167033B7486D3950F68551E43B7964727A404705E53198B051F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 54b2982cc135288be018f0c9a51fd48b2ca28b12e31bde7fe140d03b4c39f8a7
- MD5 b65e7c30f77688439253b38c912b63a9
- SHA1 91d38f3e3b55c93382d753ca4b755901ec144ded
- SHA512 e66b0135076fd5b4f1c8514e729bb333f39fc7e3250e9d1b6493e2c1b7bb3c3e41d96a34936438c6868d117f4b7588ae5612f82116180a8fb371dc0697ea8349
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 a0e272079f9468a61d8ee616aa839bf54c65ddf6446556848ea295fb85b15d88
- MD5 9534d88df08799cf9401a4a85ea8c99f
- SHA1 681ae17507fe0844d2f277f61540b6e097635988
- SHA512 3efc9af0cc364f39479afb30ffd5b2a4048133f79aa9a93d927dd32a69649fae5dcd94d18d1c14c0a8e42cfcf894d8d4ed388b5c4a34985be0fa92cbc2378855
- SSDEEP 6:7+/l9gSn1UJvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKt:7+t8pqLiuWdYRmBEyPb6
- TLSH T10F02228CE3801813C82D7777B8D883500D00A7288171CB97169008D42D074CCA4E0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 8f988ff21d7cf7ae041a7baf75055f441d300ed4cfb7a2308743dc6a09db2e7c
- MD5 fb8388f92ed822c0170e630999e735fe
- SHA1 50c264f1f5705126753802359d754c62af168474
- SHA512 0f13717580b7996e708fab93311e0929bdbdca57096dd9db6aaac17e56e4c952fdbdba3d3332174204cca390de3eb2c7e0b1f707e0db4fe6aed0b34d4e8764aa
- SSDEEP 6:7+/lxFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKE:7+txBqLJdeWRmBEyPbD
- TLSH T1F191C08963400803C5396B77A0C583441D20A729D333CB8716A208983C0B6CCE490E48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 43b384ecf70dc420191b73c427eafd41fa8bd81314b66d10306bdafb543b2b40
- MD5 8a1383eb9025184eaf943a25f0a95d29
- SHA1 23feada8cf03666854d7b892163f3fe12e5a95e1
- SHA512 ae5dbba2ca92535f1bff47210f533e6569bed0ad75d2dfe3e91a20633271da156f33140524047456798ab5148511b7c90107b530fbbb305f85a13492a81d907b
- SSDEEP 6:7+/l91TPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKuJWy//+:7+t7qLmqKRmBEyPbfJn+
- TLSH T10402C08C77C00C03C03E1B7790D883500E28E3268135CB071AA108683C074CCFDD4D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 cdd7a060ea066259562b068a78893f9942c9eb0f34d6d49d93273ea79f055f16
- MD5 65da5b1a927c44a6917a51f76c978485
- SHA1 2ee569b6a7ad74be5063a959de66b93a5d66ab64
- SHA512 77eea345cbd0e10c70e35e22b2a203ffc2224e44d07e22ac8648ad446edd56bf765cd4b22f0270b5ebdf45be90bc8996b2843f3a2ccf952bd5afc4a191525466
- SSDEEP 6:7+/llV7g9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKuQ:7+tllqL8EA9zmzrfRmBEyPbA
- TLSH T18C91728C8F002202C1370A33B0CA83401C28622883379D132B980434AE420889052F80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 19343bc9ae57b517e4b14cef137f5a15846e40a9d03f6bcfd34af9cfa759b08f
- MD5 8a2cb43d5bbdf7f364bbb3a115d3b41f
- SHA1 217dcab1d4d99d8c24e314f2109e8b8278f375ab
- SHA512 bfe5f2f2068de5e2e27480e321ba5a0a75dcd0f6eaee6a7075483cf27c4d8dfcf8e620f7f1c5d9d016f08e3593cd03b0b794336646931986e54bfdf1958c7877
- SSDEEP 3:2gLNll2Nllxe:2C
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/files/PersistedInstallation8339447400715022293tmp
- Size 90B
- SHA256 06063558af04a28b4274b4306fb334c07f2da932298ea1f667efee1679e4b50d
- MD5 99d6d7b5cd6ecc8d7034571936ab989f
- SHA1 0face89f2352e1b13677f4d76e588206cf189161
- SHA512 d5eb9d927a2a4dfac5aa3f52406013e2a68f568ec12b948e87f819b40d38940346832f66fc9b85cae88ea28f5b0da591a22c25fd1328890ecd5444113d0f506c
- TLSH T152B012424E31814186CDA2032C4CA2047D402840240ACA158B0AA45940812D4D133E94
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 924dff2da63a365b62f3f90d6dc89de2ea2203f8c92789128dfa23ded542687e
- MD5 5227a93370ad5e8bf86a036d626e1278
- SHA1 9e243ffcdf069743fcc93c6d18f79cb2d380dc8a
- SHA512 93b67d311c6be33a8ff0461aa7a094b3e591739563e73c54f64159a33c7055f184be11ffb891083277087542086a24e7ee1f36ed349329e1a5f50c6eca11d47e
- TLSH T160E0D800D6E19AA15CAF520D7F9801180F3FA3A661BA449E25A84184B90E784D5C7F17
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 5879bc6711e29c5e21c5a3c3a2e7d2a54124ddf3107dd741e62bf7f2fc66f715
- MD5 65eb650ee78bbfccb5a9afa288f81ed4
- SHA1 b3e541c40b14a31c9a047b23128798a8cb661a35
- SHA512 c807c505c1de17622af4d32ac57c36f7724284c9ba2409ca31847084bcb10971cd16d3663e0265cb7a321523a447fae85c607c32dcedb5db55b68634ff7f4bc9
- TLSH T161E02000D6D199A15CAF520D3F5800180F3FA3A66175049D30F40184B50D784D5C7F07
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 22dbb09ebe103879d15d73e76ff340fc76213722de93f9c266cdbf475368b5b6
- MD5 238ce5fc858e3fb87fc1716cd83dc9b5
- SHA1 b73fe25e046c0bb1a0da27d4bfd0922dea664479
- SHA512 f2fcfc8de64ee4ffe75247c4ef89450d22705a9b677ce1f17f9630af72dfb48ac47b152cea9631f45c669e0b0e8c09bbc052da02b5d8c2a66d35bf6c2e4e7bd8
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 5c4ba61f847f11cd2e2262115252a89dc0592e7540cbca73ac0ff7662e043458
- MD5 93671034512841b0b1a42118091f2f26
- SHA1 c5b6ac0825f0b59c2f4baa2b52d60d5ad44ee693
- SHA512 95ecbe432cdf2d7f0212cb415092aea2897d9975b707493340fd314b424fc5e7999b8cd9c9f4f6a6b36db985b733a133a0a74ebc449bd224b724fc26516f2d7e
- SSDEEP 96:18PCEIssW6j6+OtidjnZRWzzb8/KeKcK+zSHKz+XD86u0ExV:uTcjotidjnfWzzb83zSs+XD86u0ED
- TLSH T13DC3318E0F59EA10D0AD54F0E8D00BE1B93E412EB39FD39275910075ADD2921D96ACF9
- MD5 SHA1 SHA512 SSDEEP TLSH