General
- Target Earn Robux - Ads for Robux.zip
- Size 19.9MB
- Sample261023-ampwhaaz2n
- SHA256 d9f530a39256b9316e24ae10003e0b9133e541a26688aec1177acfe68aaf1d81
- MD5 c6d598ad1cdb1841a69bdb0d53395f09
- SHA1 e22ccf71497833ecc22f7c203423664ba8b6c1e2
- SHA512 f947791b8bc5488ea79c0ca6ef68b6877062bbdf63028453de866b72b501a365d7d393776a6c59fd522f5d19f9dece6a8bf3207af95606829afbf908cce06b4c
- SSDEEP 393216:9tcQV07rmuxiHYRNIrFCJcGFduun3dfSBccVK9uQrrcLWJfCGxbtV:GOMiHqKFXGF7nMBccVKwQrrcLWJKGxbb
- TLSH T17727336160909F8C411B8F7CDA9E061E28D0ED1374B171AFB5A4BA8912AF7C5B67DFC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Earn Robux - Ads for Robux.apk
Resource
android-33-x64-arm64-20260708-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Earn Robux - Ads for Robux.apk
Resource
android-34-x64-arm64-20260325.1-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Earn Robux - Ads for Robux.apk
Resource
android-35-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Earn Robux - Ads for Robux.apk
- Size 21.4MB
- SHA256 cfc366b6ecfce802cdef23cfcfe105a75cdcc54a00a1021c9d81c4295810f422
- MD5 7733dd9ba89e1eb8294b40e1972697ca
- SHA1 2819e6417b74e460be9ddbe65a1d7ed847e072b8
- SHA512 ad6b55eb563c2c15915612958f007fee68c53e2a4edffa1553ca42949a02be854cf6b33ce4e5d70423f4b1aa0adafc05812df7ce523a21cf8cd7f3ac3982699d
- SSDEEP 393216:wEICbLoCf8FyUk2ep4P4bdWP4xmeGzDiF8Lu/M7mVyrnPugO4uD:NjQxk3bkPGGzWF8Lu/nP4Q
- TLSH T12A3723D2E710CC0ED1FA4532C9D3862AF4936C22555B190EC8563B6BA8F76F4F931B68
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Queries information about active data network