Managed XDR

roblox-1-_unsigned_sign.apk — malware analysis report

File info

Filename
roblox-1-_unsigned_sign.apk
File type
Zip archive data, at least v2.0 to extract
File size
5.1 MB
First seen
Last seen

Environment

droid7/x86 ru

Hashes

SHA1
4698a8d63d9a774144d484181a7c4737df4a3c92
SHA256
9ba09e4938477ad48cf09965202f2b107a1127912fa54d8604037c324b41cc12
MD5
23873cd474695e97be308893a69f8069

Signatures

Other

device_admin: Asks for device admin rights
is_device_admin: Check accessibility - device admin
dynamic_load: Uses undocumented methods to load apk/dex/classes
runtime_exec: Starts native process
acquire: Acquires the wake lock
skip_main_activity: Abort loading MainActivity
kill_process: Kills process
super_user: Checks root access
wake_lock: Creates a new wake lock
dex_elements: Modifies classes path (possibly, dynamic code loading)
ignoring_battery: Checks accessibility - unlimeted access to power options
power_vendor: Unlimited access to individual vendor power settings
reflection: Uses reflection
framework_check: Checks frida/xposed/substrate
media_recorder: Using the MediaRecorder
register_receiver: Registers broadcast receiver
read_or_write_global_settings: Read or write global settings
shared_prefs: Uses shared preferences
trowable: Throwable exceptions
start_activity: Starts activity
start_service: Starts service
get_runtime: Gets Runtime class
connect: Opening a connection
read_or_write_secure_settings: Read or write secure settings
change_screen_status: Display status is changed
notify: Attempts to create a notification