Analysis

  • max time kernel
    5s
  • max time network
    1754s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    17/10/2026, 17:03

General

  • Target
    Delta-Executor-2.711.apk
  • Size 176.5MB
  • Sample261017-vkn7eats9p
  • SHA256 a700e160746b6d280a0bfccb7c3cb3824f7cb3bcb446a7230593e683f1e46e76
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

Processes

  • com.roblox.client
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    • Checks memory information
    PID:4941

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        035d445170b57ac73c929294768d58e2.0.tmp

        • Path /data/data/com.roblox.client/cache/035d445170b57ac73c929294768d58e2.0.tmp
        • Size 6KB
        • SHA256 f1e559c6371b1b3da8919cdb6beb556560f9b6827e29a42e8c6e9149eb3b6dd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        035d445170b57ac73c929294768d58e2.1.tmp

        • Path /data/data/com.roblox.client/cache/035d445170b57ac73c929294768d58e2.1.tmp
        • Size 72KB
        • SHA256 eb8f4436e66df445a1318b041999dce26ed0b9ade19b7c9f6e1161dcfe2bebd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal.tmp

        • Path /data/data/com.roblox.client/cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1a2d5dd0f486021b5c66fc075ab93fe45ad860cad1a2bd41b42cbba01b9539aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 54b2982cc135288be018f0c9a51fd48b2ca28b12e31bde7fe140d03b4c39f8a7
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a0e272079f9468a61d8ee616aa839bf54c65ddf6446556848ea295fb85b15d88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 8f988ff21d7cf7ae041a7baf75055f441d300ed4cfb7a2308743dc6a09db2e7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 43b384ecf70dc420191b73c427eafd41fa8bd81314b66d10306bdafb543b2b40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 cdd7a060ea066259562b068a78893f9942c9eb0f34d6d49d93273ea79f055f16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 19343bc9ae57b517e4b14cef137f5a15846e40a9d03f6bcfd34af9cfa759b08f
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation8339447400715022293tmp

        • Path /data/data/com.roblox.client/files/PersistedInstallation8339447400715022293tmp
        • Size 90B
        • SHA256 06063558af04a28b4274b4306fb334c07f2da932298ea1f667efee1679e4b50d
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 367B
        • SHA256 924dff2da63a365b62f3f90d6dc89de2ea2203f8c92789128dfa23ded542687e
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp

        • Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
        • Size 343B
        • SHA256 5879bc6711e29c5e21c5a3c3a2e7d2a54124ddf3107dd741e62bf7f2fc66f715
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 22dbb09ebe103879d15d73e76ff340fc76213722de93f9c266cdbf475368b5b6
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 5c4ba61f847f11cd2e2262115252a89dc0592e7540cbca73ac0ff7662e043458
        • MD5 SHA1 SHA512 SSDEEP TLSH