Resubmissions

03-05-2024 17:30

240503-v3bn2aeg58 10

03-05-2024 15:32

240503-syk1ssdb37 10

29-04-2024 16:36

240429-t4ld7aff4v 10

20-02-2024 15:07

240220-shaj5aah26 6

Analysis

  • max time kernel
    13s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-02-2024 15:07

General

  • Target

    Clash royale.apk

  • Size

    3.2MB

  • MD5

    f2b9ffb8bb4684754a7e1eb02f1added

  • SHA1

    b3d4a329b035a97c21f09698eb20e3db732aed82

  • SHA256

    eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c

  • SHA512

    37ca4bedd0054ab5233b441861e9c30f128238e75849ef744195d92e5c0a8f5da6db633c95b05397a978d0f7bdb31be4c2cfbf696687a3e968dc5cef17043345

  • SSDEEP

    98304:F1yqxOabNLn7Rk3H0bbamJL4F/E+roUWwvlL1K:zLwyNLVcCJk6+rotsl4

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.ClashRoyale
    1⤵
    • Acquires the wake lock
    PID:4247

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ClashRoyale/databases/core.db

    Filesize

    27KB

    MD5

    c7b5801f4970b944a556dda8d75097f6

    SHA1

    ab62d5c3d60940ac286f019fecd21f822af864f2

    SHA256

    cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0

    SHA512

    6ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    41172d46ff8888be4cfc7da9dc7d75bd

    SHA1

    83758a810bc86c52f60c838acebb9bd0c541be19

    SHA256

    7c27b82cb8af372763b0699274222450a8311bcf96cd8e876b717d4ead2a4c9c

    SHA512

    6d2556fbd104bc18366276346a8fa3d36992b5a7e98b2dc43683912ab4322dfda0ddf76c43b20710f8b5a8018655e731e5a52b2e573fd62f0ba0767b868c3972

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    613ba1eb1a7260a69d59c043c000d228

    SHA1

    d56b9049937cba468c298cad846dd6eaa4f4e914

    SHA256

    4398d962540f60cef530574f2dce870687bd6546d6062dc76b7442375f0fe62e

    SHA512

    dbb5113440cf1efd7f8b18a54bda3cef92b8b3f8f2fc1641896dbb6cb0834655dc3da81d9408d576d1734b89527d69d04f8324fde5bab1b84b9e45c87149d9a9

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    7835c5864e4cfc833beb3eb4b0b2d9cc

    SHA1

    36b788eb49a390ded919ce13cd8c85c5e1b9b150

    SHA256

    6c2c638fea6ebf430234ffce674231e3fd44a5826ff32687b8a7604aa336bd58

    SHA512

    8ee3b3dc3c48313820dc70790e05720984a7554ccaa8024406fd2316a814f221a327587346a7da19fde3393ff571345f3a43943ee1b1bfe7a0e14bbe6e766edf

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    4cff43626520aaacdf623fa3cecb48e4

    SHA1

    81422cc5a5e97160e46cf3080566747cac4ff9ef

    SHA256

    e0727fffaff4ed1c5b338299f90f3decf92deb20675f564b00bd7711950d6cdb

    SHA512

    f43bb7e03ff6e8c321fa10938beaf179bb2b7bf5674f37d38e8357062e5fd03de83bce528045d85e9dfed17aaa428e27f54764fb257f1b93c60af1f487958f55

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    b4143259509df9d890623557a5edab17

    SHA1

    a736b5091b8e5e82b0a5fe067aca8e2ec8ec4de4

    SHA256

    71aedd1707a91b357847554b1e8de020c7c1deee8a4a3685ef49f72025f41643

    SHA512

    3ef0fe0d11f81e4415db31ee4d0cd102d369a775ce83f78d53e330ef42ab8fbf2b575f91e1c8e191323a366c8f3d23ab041cd44ca171a7e5a5f9e096c468a4cd

  • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    c8b73b27a83d6c6628e371696c5d941d

    SHA1

    9b3d7c307f566328b1e9d72f56029cbcb18d1e73

    SHA256

    f68058bd097296a22c32674e8dd65e71c028279a69a8e2978e58feb18e0ded23

    SHA512

    33b859e75403defbd3115ef6596ff754e37462bd99e2e040afb5814691ce0a6d1e778752879092bf2122b9f9d033d3b6146be498fa9c16e45053104b88d791ef

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459BeginSession.cls_temp

    Filesize

    77B

    MD5

    f8a559b6977b7fb6c4fde129f8c5db93

    SHA1

    6c6fdba649588c304c3536a7dc5869475b85d39a

    SHA256

    f08c166f4d7eb49f7449eb99967443abbca3b340c44016bab8aae143474a1b3f

    SHA512

    655871b7f420fad7f4405fae5552a853efa82226ae5b76224876847147f9d80639f576a0af341c1f25a95b9b1c50c2a5a332ec9d199cfd768aacfaa27c11e45d

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459BeginSession.json

    Filesize

    132B

    MD5

    1d2a913c0d854a35aaf0910640b4a8ff

    SHA1

    62e739fc8d7d94597f2e45112465cd3789b09255

    SHA256

    344fe657af118509f16a3dce25d3e565e9dc6bf8e11c50492ab2c435406d2c0f

    SHA512

    6121e69bfe38a91972fd61106b39b12f80f2f907ef5824152f8ef47619465088b33c0b35634824091cf40d12b37b61c3a8d0016ba43e426a32427bee6e948b3d

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionApp.json

    Filesize

    221B

    MD5

    d4e290246f137441516354835a574f82

    SHA1

    130abee71301160abf0a2b03a745272f21cc80a2

    SHA256

    06a07d342d504b64b85355f9989f4f0487685d42aa27cfce6354175b50a09b41

    SHA512

    5ce9680c39486e11a83a68cadf62673f17ab25b575525de563e3dc08bd7b7b10d7dcd43ac5ebd0076e87d23535200ef7173c2d264d88a96084b7183d38cc62e9

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionDevice.cls_temp

    Filesize

    48B

    MD5

    630aaf4621d940e95530e8a8b0d39283

    SHA1

    d06c5d18de58b6abb5890a83b6fb3c3aa4a2139e

    SHA256

    2f752007f6c33aaba282800edfe3d52da2ea954e3eceddf08efb0bfdc989cb93

    SHA512

    98c301f0188ced6036a863ba790e03ba22f88ec55a884fdf808711147228e97ee0571abad094ad68d758b2482db6ee3f2950d43d56c875bfeda7f0a58cd1a86a

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionDevice.json

    Filesize

    202B

    MD5

    8c1412ceb8c8543650bed0f85dcf4c99

    SHA1

    e2ea16a5e4f49d8f4fc661f127bc8ce6f5d2e485

    SHA256

    b33eddddb3bd84b5d5975b074dd2fccb335c715b8506862cfaf451ec1f8398bc

    SHA512

    8d067a69ce521a0e004215bf6b746279e4c32e0bb8ba90de9e3e7e519e421997aafe1a3b8d636cdd4da578ee3c538cb1b84fa60c368c0dac9307d4064fd33687

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C020026B-0001-1097-F0F0C8381459SessionOS.json

    Filesize

    54B

    MD5

    93023624eb8dff5c20050da136aaae0a

    SHA1

    acfd1ffed752c28fb135ba83c0c6345ddf2f6995

    SHA256

    968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

    SHA512

    bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    821B

    MD5

    5a6a652b10b421c56a44ada5acd23686

    SHA1

    8240cb6ad792c04e58f850693989b2e2ccfc7e9e

    SHA256

    cfa5f20f23c823b0e321258366433473d4f1aa96d55fbdf0b70217a0c4e2b6b7

    SHA512

    ad71dbbdfaacbda7f742cf0d7a5943807f432290399f229e8266dd57c3d89860c0b0964c040ced2081b43d55077f4fcfad7f94c26c8a0ef1f8953bce2f214608

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    393B

    MD5

    a526106df3743e6d7e051a2579a83491

    SHA1

    96f9d7dda67a8db7185c71fcae37aef5a533673f

    SHA256

    64ad85035aafe2bc9b43eda4ab32d583eceb56a13de8b78944f7329dbe63439f

    SHA512

    cc663c6d75043c6ad89424d7ad9f19398cc125d3efd6b7bbbb39ecac864e2b98c20d611a225554bf54bd1a850d373932f0a68f4ed86b997589e2f5bdf26aa880

  • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e