Analysis
-
max time kernel
3176045s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
27-11-2022 12:34
Static task
static1
Behavioral task
behavioral1
Sample
c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f.apk
-
Size
435KB
-
MD5
d7f69bad47759361c6b328eecf26297a
-
SHA1
f070cb686ac3a15b1f2b9904f5f3181aae60fc7d
-
SHA256
c8a5a415df586bba5bf8eec354428e871185ef2649c995ddfc71985b78359d0f
-
SHA512
a2f7a1f9b1595472c09e497350f83c722bb700abf52bce2e4b5295c542174ff3d5c27c078294f62dff208736122bd508da1a2e72ed5f53040de2c4e11368c1e8
-
SSDEEP
6144:m4wUBwU4wUBwU74jHm8PpFbiu+zb+RDsySD1+YWl27202pl+9HaT3J/iTtgjy6r6:Mne/cZ8qxuOvD1tr2+ntK8YxWvek
Malware Config
Signatures
-
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
Processes:
com.clans.war.appsdescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.clans.war.apps -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.clans.war.appsdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.clans.war.apps
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.clans.war.apps/app_webview/GPUCache/indexFilesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
/data/user/0/com.clans.war.apps/app_webview/GPUCache/index-dir/temp-indexFilesize
48B
MD56f197c07918a96564f9b6576da5b8c8c
SHA16179c0c82b81e67d4918e725bc229537ce4bc229
SHA2567b27e91edd2dc8cfcd56f2f88215d1fe6082a58575877ed5d980f1c5210b0dbf
SHA5125b1f1acb967cd02e4d1f976725c9407401b15477210aa54e8c32979900defb5acb77a9359418fa21accd73fd0bdd18998e355e6ad5f02e16841296ff147bdda1
-
/data/user/0/com.clans.war.apps/app_webview/Web DataFilesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
/data/user/0/com.clans.war.apps/app_webview/Web Data-journalFilesize
1KB
MD50c94c280ae3dea1dc903d8c615ad971c
SHA1bbf5e869d279849d13ddaf34aa3bbece22857baf
SHA256b94d6a0a4f3832199da22a3ca9c04912b7ef17fbf4b49d4f06aca4ace4788cc3
SHA5128ad4007555bcb88aaee8d01e328fd3c76c3c4077e766309aa4bd5ca7b39d411e6c55f06914922e963f1f3422b8ff1a31eed527ecde43496b5b641e7de9bb41f2
-
/data/user/0/com.clans.war.apps/app_webview/metrics_guidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.clans.war.apps/app_webview/metrics_guidFilesize
36B
MD5ec003c933e4cb6f99c107b0a53ef6aa8
SHA131941b14053d3a3abea34b9ae1abe9c720c28e5b
SHA2565c3ffcbb5725b37bd571e7a1aa6e927ed75f46cfdfc4552a4aba801f5329b32f
SHA512af0245d84c2d0d7444a4f645196b322b75424f4462fc37a07dd9df48b773d61527a38ae0931db07b4a8da16c3e4776349c53c7fb1d39f4031d2de328f0c353c1
-
/data/user/0/com.clans.war.apps/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.clans.war.apps/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.clans.war.apps/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.clans.war.apps/cache/.com.google.Chrome.KIaM2NMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.clans.war.apps/cache/org.chromium.android_webview/indexFilesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
/data/user/0/com.clans.war.apps/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
48B
MD5f8d8bd3956f3e7bdebfd615898442971
SHA12426a93645d56863a50ab44e0ce64d7cd9a9a2df
SHA256894df97bbe30a576140383e46d808c7eef79e1a3bdc9ef13d7a4c16ec811ba21
SHA512d5ea1ac1f5c6a734abd520a54b41dd21d4c58a91554fd0163275b6f3b1552368376067fdb37e376ea4511929537ce5b3f7d1dce2222eb97bc0dbf85695bfbc15
-
/data/user/0/com.clans.war.apps/files/eula.zipFilesize
63KB
MD51a6d49d2adb9303a161a950db2de3927
SHA13f9a3ff691d967a4bc3bdffe6327cfab0c416ef4
SHA2562eec668519c3ac15ba5e1c7bb8d83abb9bf935a32bde220e42a7047d66c824d2
SHA5126459e8004f34945396fcec424bc37e34c7f86483a63a74a9bca2e9c70791cb0fda0ccb23b72944167693c7c71b418db41acd08dc83f2bf55594a02c5725fa4cb
-
/data/user/0/com.clans.war.apps/files/offline_eula_body.htmlFilesize
18KB
MD57813643485a5318f68291e87315a6fca
SHA1207f1059f5ea34b0fc4011848fa4682608d26443
SHA256c0487218c63d176ff68c0c6bc91866222ad9ae6420ea6fdf06790ff01a1db918
SHA512e571984238e162b5d2c61973fa62645950f69b2a75a0c7b11d6854c9b89ab0164475c96515b7c48c8d60926c90f439e7c172d5df00b11413bd6584b0d0b3f19c
-
/data/user/0/com.clans.war.apps/files/offline_eula_footer.htmlFilesize
13KB
MD59818dabc2eb86d5f4f071e9d67334570
SHA1117e7978c9293d86ea5492b90a4999cc24225dbb
SHA2561f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
SHA51279937390d4b02688abb0e24cef356024c3dbd3cd59d85ea3300556af59f0648293ed24fb5db740a4329fdddccf43af3b7679135555397a3adedd3eeccf5423a0
-
/data/user/0/com.clans.war.apps/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48