Analysis
- max time kernel
6s - max time network
152s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
01/11/2026, 21:07
Static task
static1
Behavioral task
behavioral1
Sample
roblox_v2_745_1142_mod1_sdk.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
roblox_v2_745_1142_mod1_sdk.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
roblox_v2_745_1142_mod1_sdk.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral4
Sample
isdk.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral5
Sample
isdk.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
isdk.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral7
Sample
sdk.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral8
Sample
sdk.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral9
Sample
sdk.apk
Resource
android-x86-arm-20260325-en
General
- Target roblox_v2_745_1142_mod1_sdk.apk
- Size 148.4MB
- Sample261101-zyebksdc77
- SHA256 babe19db95bb0bf24dc1831372f59f48eb3f0ccb381760ab73c6619c208b802a
- MD5 d16fe69a1d3403c00857fac0849abb8a
- SHA1 499ecbb3de478fdc962b2fe62276bcaf7c8024ef
- SHA512 b5d735c1403eb563c6af04a6c133a7241e1babc25cda2c7eeb66eb340247048db89fadaea31c1758250bd8952a9d177ac262bcf34d7ed7cbc4e7d92aeca60c76
- SSDEEP 3145728:8WqNE5hbXEd7Sg56Fk77c8cBnmmcjhb8tLZz2gY:Yy5dUV/wsqncFE7Y
- TLSH T18678CF09F2824E23EE6A4B385AB797917735EC4D5B07CB6F200871B9BE773C44E416A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.roblox.client - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.roblox.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.roblox.client/cache/d5eaa3aecf82dbfac75854d2917817aa.0.tmp
- Size 6KB
- SHA256 d3b600e94ebf30a85dcd4f6df3494c93d025a8ad1dd1b19bdfea55b390c840dc
- MD5 ffc469d2e01aa8c26d9f14fa82e3977b
- SHA1 67324e49c2a66c6c363f7c04151fd10b4d7e677d
- SHA512 5b84bf22b0c58b80b1aecc2c23a6afc45feff5a3d99061399b45c418143a7c47ab4a5921ae4915f5e5227e9c23d0230f8fc68a25d881302d3ae30097346822ca
- SSDEEP 192:N3pUqnZb7bh9VjtN3HbZucKBrvaJfq5Ps5w8tWaMV6:XbZvt9VH3duhBKqPs5jMi
- TLSH T182D16D2A2F6026571F93E056E6A6AF1C3510B58BE1E14D5EB5443016CACCB1424EF4D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/d5eaa3aecf82dbfac75854d2917817aa.1.tmp
- Size 14KB
- SHA256 19a8b4b20f222ba610c6e331659a76277f83757e32baf711b6db0014adaeae91
- MD5 d041c75fc0e5cbe8a16fa9226573b4ab
- SHA1 4399895c1ac96859d73338bc405a0b28ad675a43
- SHA512 8f8c4101b382a3370ca497878f1c29d92e408161ad44d3bb53e4f07f672a21dd87defa92b6de21ad4d437ddd0f72c633883569e611d50293b51a3d7f9e25e3f5
- SSDEEP 384:C53EWN5hZjH1jDwUMffCRFSO+7zkw8b2GjBpWLs6a:CpEWZxjDwUMffCd+4gLs6a
- TLSH T10E62C0E0C4CBE40164294F75230FF1D4B191D6DFBA97A21A6254327DB6D7F0FB28528A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/cache/journal
- Size 39B
- SHA256 eeec22d94d65d10b0aef63b693158326542f2a83df10163961284e64daf35dfe
- MD5 2e3946bed0739bda4f17f256494f48ca
- SHA1 da7d7ea18738394b5daa920ff2e5485f9fec3337
- SHA512 4c6dcf4abbab86e614016f7f932fcd6aeedf2a2874575f21deb4d2cbb933617e9e0c39fd2c08a543a55464a8da9650ed329cc962297720a89b931914ccbcba07
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d1ffdca7ba8c0925bec4d10295b7c355bc1cace5e6b44d6efe9f812023f9e772
- MD5 dd9a2fe8f7bc14471ac42c324c607a30
- SHA1 f88c5a77e00aec2c00147b84e0d346cab31804f1
- SHA512 f5edea485e7aec27b231844b38e7741e8cfc64ffca299467c5761093e8e173ffef1ab808db141519cba717fbc2d28265b5cc316e6221f6997433bb3ff0c4e0da
- SSDEEP 6:l9bNFleLIls1uGo9FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0Dq3:TLDEuX9F7LzmzsRmBEyPbBvOwVQ
- TLSH T1F172D8CD8F10A206C517033760CAD3950F78551E83779647166408605E52598B451E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 4aec34c116bc491067ed5d4d54e7a11e01277f8c3b9bc388491314a348a1aae6
- MD5 2302cfcbd4c29e897ce17e6529f856f5
- SHA1 0d08fe4136b6a564cc0277ff121b243c3d62f676
- SHA512 1c4cbe117b26fbb5ca37b409a056fdd1dc2878e9d255ca4ee9d9abc631e3b2e50ce936f38dbedf9c0ab4d4c6db2c4b30ec02ce2728a0e316e14f7584730d38c0
- SSDEEP 12:TL6ET9F7LzmzsRmBEyPbP/DvJ+/0Fl6loL:TLlnHmz3GSP/DvJlFX
- TLSH T190722BCD6E10E743E1270B3A70CB97EB1E3C611E4367965B3E6409649D532C8B152F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 82d1e07d6be99dd35b44413f68e27accdc6e82f81bcb420d5815361422c4802a
- MD5 8236f3b044faafa1bc77bcfddec1340d
- SHA1 b9df9f9dcbf83c2ff18b550741b2430450abf3f4
- SHA512 166c9ed8004c9b5de0fce1cc38a027189e6941cf83a84c65897a959bf5ff39a360230197f8c77985e64343da08b52cefe9f124351a92eca4c6ee3029cbbf82a2
- SSDEEP 12:TL6UEI/9F7LzmzsRmBEyPbP/h1V49blqYFlb03vJ+/0Fl6loL:TL6Y/nHmz3GSP/h1V499F4vJlFX
- TLSH T101722B89BA24E753E2670F3961C7E7D72E3C711B0767961A7D250A2C5D433C4A462F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 75bb107d9e6eb54299538cdaca9e816eb9f93ee50c819ca588b33ab44bc8bdf0
- MD5 aecc56c406b16eaafb05503ee5fa9fb9
- SHA1 deb4a1935170a98aef075076bd5288e92fa106d7
- SHA512 33da45f347c10993533c42f18fbc5bb39da08a333004b2fbf814eff4b0dd9d82dce70fa3d169e589fa347ce4181462aa077fa038c6c43f7afc5548b4730919c7
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5e2dadfa91dceab21b7b60f0c8a6e322f161102a3c0cb9574f0c808f923a81f4
- MD5 0795fe1e9e32f90171d72d77e93f0abe
- SHA1 f07620c95db05e19ff08f7f2730cc1f5ae01d26c
- SHA512 451b20d024d0291fa7894d40e4a1cdc31fea2f4f6e420420ce394bd0b076f770f2048345baf17c5851abf5db4eb81eac82699728c0fb925aa225678df66bd38a
- SSDEEP 6:7+/l9JmFn1w0rg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKO:7+tbmMAqLiuWdQoRmBEyPbd
- TLSH T1DE02C0CC67800813CC1D277790F483580D10E79C85B1CB07095008D43C4F4CCECA0D5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 41881460013bfd80254cc0295088a6d47c04070a2fa7ccac1b4506983a219359
- MD5 ec4ff90b01d5ded123eb96d17fe617f5
- SHA1 3044c39360c6b8681c09fce26515e0debd914281
- SHA512 7aab0dc802010db0ede8c97f842ee3173955ce66f41f76af283398c614dba99c74977724d02e127d278d56f768a17b02285178ceb5e68935a78e6715d855098b
- SSDEEP 6:7+/lVpEPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKN:7+t3sqLJdvloRmBEyPba
- TLSH T1339180C977410913C5196B7FA0D5C3591D1167198373CF571B5008987D47ACCEC90D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 139fb6b08835711a89eaa4fdf2eea7cd9cd651e73b0a123e29e95802c088fabb
- MD5 066dbad4e55c7c7080353850a334468d
- SHA1 cfc1e016b6a60b7e8f7e20b96474530adae3dbaa
- SHA512 dca292740ffe72365c0a76e604eb0d22b6046e343f56bed5572305385991800ca4b1d699e85012051b3df295f5f52d9cbf5a68ef8910a59106e4c876d20b7331
- SSDEEP 6:7+/l93KFPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuKbl//P9:7+tWqLmqioRmBEyPbKlXP9
- TLSH T1930222887BC02C03C01E1677D0DC83680E00A3188221CB0B05A208A83C024CCBC90D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 43f805a3907552d5aa7688a80b918d93c0de843a0dc906d087c47326a2818e13
- MD5 4018adbaa008e975f53495ac087696f5
- SHA1 4f85f2ff14753bef50ff128e08ded8c98150845d
- SHA512 8f5d6f00bed27f412821e707c6e147f07bdc58b2662342e0c21bb8df0215f2ca6006e6f62d997541352c1178c27afb1260215386dd0ad6f1a42413a89de6a39f
- SSDEEP 6:7+/lJ/7vg9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKF:7+tJ/7vqL8Ef9n9zmzrfRmBEyPby
- TLSH T12291EBCC9F002603C1370B33B0CF83501D28621CC3379D032B980830AD831489041F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 37c47389df8e79931193b91d41d72a18217812ad7c335f52324344d89f3775c7
- MD5 08d6de0466425381e669619977e59715
- SHA1 0a1efd9850557cd20e148715596556dd78ec4585
- SHA512 0314deea78bd1ca92fd930c499a9d8d415a781901905c1854a14996c86e816587a26e88ba8ecf721b94274c106602d2a1a8621e95d50924c45c22a3a4038348f
- SSDEEP 12:7+thbvJ+/0Fl6looQsWqL6ET9F7LzmzsRmBEyPbV:7+thbvJlFUxWqLlnHmz3GSV
- TLSH T1E0025C8D5E10E703D12B077A70CB93D75F3C650F4363551B3D600A649D532C4A012FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation3382476362441073134tmp
- Size 90B
- SHA256 3f8c52b5807afc318df87e573de1ab8b3ecd420bffb5520b2aa30b0a5de882c1
- MD5 3d4d7b8a27e210a4e12414f533968500
- SHA1 4668752cd401ae1062cadaa6e7ab339aafcfbb4b
- SHA512 bd7552d55027df08b58628c09208a79fd4e673ba01f03fbbf107ae7a36b0f0dfde80b293b9d0f3dea6575227acb6ead1eb86f218663ca874fc9a3122bb9b8dc3
- TLSH T106B012008E7147468985E2032C4C91409ED13480540ACB492B0D9941C0811D1B257DE4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/PersistedInstallation5412346431412232643tmp
- Size 559B
- SHA256 187e02ae59dffce8c7650dfafcae1add07e7bccef7de6bc644d7b11dc69b18d4
- MD5 257a0952cdbc8824cdc6f7bbeb974d5b
- SHA1 cb07f580f78d884f6650fca129e2a5ab299f3462
- SHA512 d3ef6a8c023af5d9112baee546764cb09ad091685c43401e82b121f793d81ae7f4cd181ffd80f07735652fe1b244b633c4e28a3f640d280d8fb06beb26c8ec17
- TLSH T1FEF041627C404209D9D0A301264CEF009E080EB1E7130274E99F8070C86662EA66B650
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 367B
- SHA256 f4a92916650c79740a9b05892f038523459b291937ed32f59fd3dce73fc5e939
- MD5 b1a7b9c059e5de71be915cb920d9dfed
- SHA1 e5300ac610ee3e45f4ab99bc853c70e0f085a97f
- SHA512 e91eab35aa682995eacaa236c3cdb83f91fce84840ff7ef72e17569b7d06e9890a277a09968f366f450cb797afea5e3d36a6c7904ab620c3b3927e2181dfc3c4
- TLSH T135E0D800D6A15FA15DAB520E7FA811180F3FA3D551BA449D24E88144B90AE94E5C3A0B
- MD5 SHA1 SHA512 TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Path /data/data/com.roblox.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDAxNTUzMjA5MDk6YW5kcm9pZDphMmU0ODY1MDVhZDQzNGY1.preferences_pb.tmp
- Size 343B
- SHA256 27b8ff7c78550f09060f0c64cdc5238af2ed54ce61abf3781162217170330fe6
- MD5 46e99ce9ee103cbb089c7a766a7c50d6
- SHA1 a16875a6a3a3636659374420f3eb874c366ad0b1
- SHA512 b8626b25d22ce3fbcaae9e2dd491a2099d683c47e37a0b4f2e632f5371184af1af3dd62ad0aecc8a0b4694970ecd6b857530dd74861ff1f25ba65ce97a092423
- TLSH T162E02600DAA15AE06D6B120E3FB800180F2FA3E561BA049D30F44184BA0AA94E2C3F0B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/files/sdk/plugin/a
- Size 716KB
- SHA256 8b2a6ed5ff792858454e26431887ce04bc831857dc89a409f9fed7b3b248378a
- MD5 de0dd92dd703ca255895d81efda8ed67
- SHA1 bc6028f4970f368262bc14423404a23dd93047c4
- SHA512 eadf07b5677037d4a00bd43e199f885aef02b9f37b3de831f65978d89cf43bc7c42e94179c55508bb726ae33808333b1812539d7817f4eafd180f64cd6ab6ac3
- SSDEEP 12288:2C6pxkDWZBdUl0COyE9HVuEwTERvgkC8oApVFiKUh7kOQf/4G6ft:w9BGNeQCp9Umf/4G6ft
- TLSH T120F48D43EB904D67C86A82395CF74340777EAD885703CB4B024AB6B97CB33D57A8668D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/sdk/plugin/lib64/libmmkv.so
- Size 713KB
- SHA256 b145e9b2da7b1fd1840ea5e9ac85514b069a13f31df0e5342c9ebb5295ad1eb5
- MD5 b7ed7e6bf43b7543a4d137d39bb37142
- SHA1 4fffa1b42e5b3df3409c9ce63deb842cb52a83ff
- SHA512 d5f4ce283eb8842a6fc7fbbf6eae77f4e49f92f6bc352e2ef1fd70d79616e75e4e3e0ba8390d650c411b200a63c379b219b747f1f01c6ce2be108e5c04f667ef
- SSDEEP 6144:XaowFFhXlZVYui6AmTh0bOTtoCD0i09L/D64OGNTWEnh7DpOOcopLHFQqbsjgLs8:KrSOOXLMKQcgKeDkhps852WUA
- TLSH T116F47D1DBA4DE83BCED6B4BD490601E1712B785C1734D1AE2813C21DEA83BDD6A25BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/files/sdk/plugin/oat/x86_64/a.vdex
- Size 7KB
- SHA256 5eda5b0813331ac6074c70aa1ff71032646ab085858d8265899a248eef0aa259
- MD5 faca4f5faa0080a918b12daf4d9d207a
- SHA1 b648dd5f0dd4f2bbc15e7f00d559b48ff034816c
- SHA512 cdf8c0d44a9220716bc90c8982bcc9dabadadd0f34603b0e96087f514fa52b3ba7f3276c2c6c608382434fc2a9a743f39089d4839456c429552a09b6bf77f0a6
- SSDEEP 96:IwVpRPmO3OLd/ylOSbDUoZaYin05NOllyRQ5L3tCJoDSKTo2QjvE2+zQ3:vVpRPLOLQ7b4oZEnBlDRt67/2Qt3
- TLSH T193E1B38ECB061324D1EE4674D4B3DA1E1AF6387971619D9D1B8E6BC430270F9632BA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 e8141ef4d95b82a21aeb3dff74e4efe048b42399dc2eff8f7b38d42cb0e942bf
- MD5 1d1f74ebc3ae92944b6bf3e57c74f39d
- SHA1 054f5bdf7dd908a1894553251536a78fca92ba82
- SHA512 972bc2b28a4bf9282a6f0a3122408d6a766f48fc9ace7cedc41d8e89bc1d0794a249d1f92ea780ff0fb3a7d3f0fad982b17207d9f4cc26a79c325c8b65b7fa22
- MD5 SHA1 SHA512
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.roblox.client/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 e196520f696161aab286265b4ee13500d8bcd859b7e222366b19dfad3d2e8591
- MD5 73cc50978f31899d6f641b67d723b9c9
- SHA1 254fbfebe2482231060398b2b9d70d7218f94409
- SHA512 80a4332e94ae77c526d890f942f2ce5d219f838e4df2a98f8b7c3d62349e6e33b16cc87a58d46c68982803d03842e31005e83f889c33e3b90d38c1b6e6b15789
- SSDEEP 96:YbPLQG6+OtidjnZRWzzb8/KeKcK+zSg7Kz+XD86u0ExV:ULQbtidjnfWzzb83zSl+XD86u0ED
- TLSH T1B5C3128D0F4D2610D0A964B0A4D40FA17E7E413ED39FD7A279F10075ADE2921DB29CF9
- MD5 SHA1 SHA512 SSDEEP TLSH