Resubmissions
03-05-2024 17:30
240503-v3bn2aeg58 1003-05-2024 15:32
240503-syk1ssdb37 1029-04-2024 16:36
240429-t4ld7aff4v 1020-02-2024 15:07
240220-shaj5aah26 6Analysis
-
max time kernel
13s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
20-02-2024 15:07
Static task
static1
Behavioral task
behavioral1
Sample
Clash royale.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
Clash royale.apk
Resource
android-x64-20231215-en
General
-
Target
Clash royale.apk
-
Size
3.2MB
-
MD5
f2b9ffb8bb4684754a7e1eb02f1added
-
SHA1
b3d4a329b035a97c21f09698eb20e3db732aed82
-
SHA256
eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c
-
SHA512
37ca4bedd0054ab5233b441861e9c30f128238e75849ef744195d92e5c0a8f5da6db633c95b05397a978d0f7bdb31be4c2cfbf696687a3e968dc5cef17043345
-
SSDEEP
98304:F1yqxOabNLn7Rk3H0bbamJL4F/E+roUWwvlL1K:zLwyNLVcCJk6+rotsl4
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ClashRoyale -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
27KB
MD5c7b5801f4970b944a556dda8d75097f6
SHA1ab62d5c3d60940ac286f019fecd21f822af864f2
SHA256cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
SHA5126ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1
-
Filesize
16KB
MD541172d46ff8888be4cfc7da9dc7d75bd
SHA183758a810bc86c52f60c838acebb9bd0c541be19
SHA2567c27b82cb8af372763b0699274222450a8311bcf96cd8e876b717d4ead2a4c9c
SHA5126d2556fbd104bc18366276346a8fa3d36992b5a7e98b2dc43683912ab4322dfda0ddf76c43b20710f8b5a8018655e731e5a52b2e573fd62f0ba0767b868c3972
-
Filesize
16KB
MD5613ba1eb1a7260a69d59c043c000d228
SHA1d56b9049937cba468c298cad846dd6eaa4f4e914
SHA2564398d962540f60cef530574f2dce870687bd6546d6062dc76b7442375f0fe62e
SHA512dbb5113440cf1efd7f8b18a54bda3cef92b8b3f8f2fc1641896dbb6cb0834655dc3da81d9408d576d1734b89527d69d04f8324fde5bab1b84b9e45c87149d9a9
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
36KB
MD57835c5864e4cfc833beb3eb4b0b2d9cc
SHA136b788eb49a390ded919ce13cd8c85c5e1b9b150
SHA2566c2c638fea6ebf430234ffce674231e3fd44a5826ff32687b8a7604aa336bd58
SHA5128ee3b3dc3c48313820dc70790e05720984a7554ccaa8024406fd2316a814f221a327587346a7da19fde3393ff571345f3a43943ee1b1bfe7a0e14bbe6e766edf
-
Filesize
4KB
MD54cff43626520aaacdf623fa3cecb48e4
SHA181422cc5a5e97160e46cf3080566747cac4ff9ef
SHA256e0727fffaff4ed1c5b338299f90f3decf92deb20675f564b00bd7711950d6cdb
SHA512f43bb7e03ff6e8c321fa10938beaf179bb2b7bf5674f37d38e8357062e5fd03de83bce528045d85e9dfed17aaa428e27f54764fb257f1b93c60af1f487958f55
-
Filesize
4KB
MD5b4143259509df9d890623557a5edab17
SHA1a736b5091b8e5e82b0a5fe067aca8e2ec8ec4de4
SHA25671aedd1707a91b357847554b1e8de020c7c1deee8a4a3685ef49f72025f41643
SHA5123ef0fe0d11f81e4415db31ee4d0cd102d369a775ce83f78d53e330ef42ab8fbf2b575f91e1c8e191323a366c8f3d23ab041cd44ca171a7e5a5f9e096c468a4cd
-
Filesize
4KB
MD5c8b73b27a83d6c6628e371696c5d941d
SHA19b3d7c307f566328b1e9d72f56029cbcb18d1e73
SHA256f68058bd097296a22c32674e8dd65e71c028279a69a8e2978e58feb18e0ded23
SHA51233b859e75403defbd3115ef6596ff754e37462bd99e2e040afb5814691ce0a6d1e778752879092bf2122b9f9d033d3b6146be498fa9c16e45053104b88d791ef
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459BeginSession.cls_temp
Filesize77B
MD5f8a559b6977b7fb6c4fde129f8c5db93
SHA16c6fdba649588c304c3536a7dc5869475b85d39a
SHA256f08c166f4d7eb49f7449eb99967443abbca3b340c44016bab8aae143474a1b3f
SHA512655871b7f420fad7f4405fae5552a853efa82226ae5b76224876847147f9d80639f576a0af341c1f25a95b9b1c50c2a5a332ec9d199cfd768aacfaa27c11e45d
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459BeginSession.json
Filesize132B
MD51d2a913c0d854a35aaf0910640b4a8ff
SHA162e739fc8d7d94597f2e45112465cd3789b09255
SHA256344fe657af118509f16a3dce25d3e565e9dc6bf8e11c50492ab2c435406d2c0f
SHA5126121e69bfe38a91972fd61106b39b12f80f2f907ef5824152f8ef47619465088b33c0b35634824091cf40d12b37b61c3a8d0016ba43e426a32427bee6e948b3d
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionApp.json
Filesize221B
MD5d4e290246f137441516354835a574f82
SHA1130abee71301160abf0a2b03a745272f21cc80a2
SHA25606a07d342d504b64b85355f9989f4f0487685d42aa27cfce6354175b50a09b41
SHA5125ce9680c39486e11a83a68cadf62673f17ab25b575525de563e3dc08bd7b7b10d7dcd43ac5ebd0076e87d23535200ef7173c2d264d88a96084b7183d38cc62e9
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionDevice.cls_temp
Filesize48B
MD5630aaf4621d940e95530e8a8b0d39283
SHA1d06c5d18de58b6abb5890a83b6fb3c3aa4a2139e
SHA2562f752007f6c33aaba282800edfe3d52da2ea954e3eceddf08efb0bfdc989cb93
SHA51298c301f0188ced6036a863ba790e03ba22f88ec55a884fdf808711147228e97ee0571abad094ad68d758b2482db6ee3f2950d43d56c875bfeda7f0a58cd1a86a
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionDevice.json
Filesize202B
MD58c1412ceb8c8543650bed0f85dcf4c99
SHA1e2ea16a5e4f49d8f4fc661f127bc8ce6f5d2e485
SHA256b33eddddb3bd84b5d5975b074dd2fccb335c715b8506862cfaf451ec1f8398bc
SHA5128d067a69ce521a0e004215bf6b746279e4c32e0bb8ba90de9e3e7e519e421997aafe1a3b8d636cdd4da578ee3c538cb1b84fa60c368c0dac9307d4064fd33687
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionOS.json
Filesize54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
Filesize
821B
MD55a6a652b10b421c56a44ada5acd23686
SHA18240cb6ad792c04e58f850693989b2e2ccfc7e9e
SHA256cfa5f20f23c823b0e321258366433473d4f1aa96d55fbdf0b70217a0c4e2b6b7
SHA512ad71dbbdfaacbda7f742cf0d7a5943807f432290399f229e8266dd57c3d89860c0b0964c040ced2081b43d55077f4fcfad7f94c26c8a0ef1f8953bce2f214608
-
Filesize
393B
MD5a526106df3743e6d7e051a2579a83491
SHA196f9d7dda67a8db7185c71fcae37aef5a533673f
SHA25664ad85035aafe2bc9b43eda4ab32d583eceb56a13de8b78944f7329dbe63439f
SHA512cc663c6d75043c6ad89424d7ad9f19398cc125d3efd6b7bbbb39ecac864e2b98c20d611a225554bf54bd1a850d373932f0a68f4ed86b997589e2f5bdf26aa880
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e