Resubmissions
03/05/2024, 17:30
240503-v3bn2aeg581003/05/2024, 15:32
240503-syk1ssdb371029/04/2024, 16:36
240429-t4ld7aff4v1020/02/2024, 15:07
240220-shaj5aah266Analysis
- max time kernel
77s - max time network
157s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
20/02/2024, 15:07
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Clash royale.apk
Resource
android-x86-arm-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Clash royale.apk
Resource
android-x64-20231215-en
2 signatures
150 seconds
General
- Target Clash royale.apk
- Size 3.2MB
- Sample240220-shaj5aah26
- SHA256 eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c
- MD5 f2b9ffb8bb4684754a7e1eb02f1added
- SHA1 b3d4a329b035a97c21f09698eb20e3db732aed82
- SHA512 37ca4bedd0054ab5233b441861e9c30f128238e75849ef744195d92e5c0a8f5da6db633c95b05397a978d0f7bdb31be4c2cfbf696687a3e968dc5cef17043345
- SSDEEP 98304:F1yqxOabNLn7Rk3H0bbamJL4F/E+roUWwvlL1K:zLwyNLVcCJk6+rotsl4
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ClashRoyale - Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.ClashRoyale/databases/core.db
- Size 27KB
- SHA256 cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
- MD5 c7b5801f4970b944a556dda8d75097f6
- SHA1 ab62d5c3d60940ac286f019fecd21f822af864f2
- SHA512 6ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1
- SSDEEP 192:ya5fI45TNlwgkKfcMw3eSRhVUrP2YgjS6W:9Iqr0KUMMeMUrP2YgjVW
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 7b55f327a56090b3f4bbd2c02de12c564a30aa9dc8703ed3139fd7544beb5e00
- MD5 14f58c5e55247e994d13ab8fdaaf26d3
- SHA1 d56987d48ff3e134337281c00912a92d5d6e2030
- SHA512 9c2b2306f55f49b070c8447d8c59801a126a71cada2df98e3892218c389763b7eaadbd84c2d22bbc54a9c91bbb26b437106a293c2ba3f2beb2e27a6bfa59a681
- SSDEEP 12:TLiEy9zmzrfRmBEyPbP/u33h4vnOAUV6ujWloNRhOLavnOAUV6ujWloy:TLApmzr0GSP/U3h4mDIKRhKamDID
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
- MD5 188c0542bc062e48b614e5ca8c1081af
- SHA1 0eb9b89a5c92957cd1fe748cc063b32853339774
- SHA512 62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4
- SSDEEP 6:l9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TL8EEh9zmzrfRmBEyPbBvOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ea6d8d0cf13aa30a5d489b9a92110556023c09c231724e81493d5cb7f99c53ac
- MD5 6913bd48cb2f9c0e5fd51b472680ae9c
- SHA1 e1c29bb73f94f30ddf02d3cfa80c786e97840d8f
- SHA512 b3f03eb8d9a6a989242712fed94424ea56072c97186ab83c81de77d0c8d2b388fb7fd15eb5f8ccc507cd1ab93e686a78081242dd582d88ad13321064284e3589
- SSDEEP 12:QYRhOLavnOAUV6ujWlonnqLWuEOe9zmzrfRmBEyPbAV:1RhKamDIUnqL5epmzr0GSw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 0afda0a542007e339f057d35c0eb2458d233be2f3033ef5108800de90ed48591
- MD5 6214f8879f5d51dd3e68e6bfeb2f137f
- SHA1 bf59c752b3382909eaf7291c33702d9e09d7cc57
- SHA512 0a817b09d9347730529cb81a47b38dc840b4325efbc3fcdf7302c53545df94b15d7b3170eaa67fcbe75513e26991656e3243ee528bd90975cd68b7ea8a7d3186
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 e0fd0415dc913793858d4ecd81afc0b1a88ca02b6cf37f5951eed27fb705996c
- MD5 5f919889e81626453942a5138b44b499
- SHA1 b7f38c9a6b8f3fd416aa262be2e071fabb155308
- SHA512 f9beb3a4c44f4ecd5fe2f925c1563213e0a93f0bcc2624dd2f7a887b093a73fb8afee1c5097fce39152bc10908938916340dec8d56d51c56eff06428992bbb25
- SSDEEP 6:7+/l9Flgn1//ng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKI:7+tZ2/nqLiuWdwRmBEyPbT
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 246fb5d47bf25fe1856c517ab12b1c651ebcf55905519f72032531aa93cec51c
- MD5 38a9d1bcf524fb2911af5f7b3c8b3bc7
- SHA1 f81dba5426d2705d4e4e2272ac33144b62cbdc70
- SHA512 a2a9bf6eaed53dbf986a87309404d382098f510102545d56d46d14687475941b25294205464f1bfc09b06d6def655692427fd2d0749343e6a8430be4b72818e6
- SSDEEP 6:7+/lJgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK0u:7+t+qLJdTRmBEyPbM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5f3fe4a3535f9a7e74045fac73a79fcee3103781e7bb3b5a799ca2fd91570117
- MD5 45d8a195465d81a18a209a95b082eeaa
- SHA1 1024c5007226810458e570a42dc254a445a1e116
- SHA512 43c3f67c733c12a042a060d1fc9f7eadc4c353a06e331a5ade20265a5fba7876a2b84fc430a05681b819aec351f5ec260388c9c5f30a258a681d887ae48d26e5
- SSDEEP 6:7+/l9v/gPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK8HnM/9:7+tJ4qLmqCRmBEyPbBs9
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 2aa8647b47b4d5a6855c0d09dca446b4a24ddbcfab1df26345edd80350bdbb07
- MD5 726bb26408294b4dbee00fe216af05b7
- SHA1 41b94cd7ddfd73692c16447200c35ea6990bd4dd
- SHA512 616cdf6af0ddfb5c2a9c2fd75663a62ee420418fc680c3bf4d50bd22fdf51db38e09a567a02469f5ff750b49130c3772e1d8ff5604b8ddd0df1c3191c8b40da4
- SSDEEP 6:vWg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKK:vWqL8EEh9zmzrfRmBEyPbV
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.cls_temp
- Size 77B
- SHA256 347b03773b4452130bbaf72cac4f9cc2f81d225d3375f7a78601975e6b5537e5
- MD5 ef8f9d5e750d303bf283c8939bd652a7
- SHA1 2ca42f4e75b3b2aeca250ecaa57b5966872fc587
- SHA512 e05149e4f86630a185f748849b509ba22dcda853b221d27556145547b54b43f9d9e623b22ab6ce0c53dbbc2def6b92cce248b21bfdb911999481e86f48113da0
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.json
- Size 132B
- SHA256 3a8c495c7739c34365d66cf1077a4ef1add2271139eb566aa8b299dafbc3bd4b
- MD5 16a9e5c2f5e317ae09a0a3bb94b9791b
- SHA1 ecafff484f7507b3fff80ea53ea7261eec914480
- SHA512 f026900f04ed571ea1bc00ab63c49cc1fbc8d3c890ccc2b97f72489673ed51aa152074ced26808cfd599595fa37d124ba0b8bc27936a5e9679df9b9522769c72
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.cls_temp
- Size 107B
- SHA256 bf739376e4921445c16043f1b6776480bfbceb1f1575aed3b15dd4d4d0cac7b6
- MD5 4e31292a42c836257a990dacfef86e98
- SHA1 1462afefecc8cf5912f7d92cef438d54298840f3
- SHA512 207969f3bc3776d4f87e37f4ee878140864d7284a21e07bab917d47c41be99d3d20892165bac6ed789eb6f269e450a276caf76e1fb9944fd03e7611077b80817
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.json
- Size 221B
- SHA256 a586e78a0c40ba3b3f9e3ab8887e43a8282c53c327a39b9d6d21535a2876a271
- MD5 46ef494728046f6a9885b3ef8b56d2c7
- SHA1 b989c2dc9a11f46547c40699dc47d3360b96b607
- SHA512 8fe395f4de5c21fbcd5be6bf45476ddf3d1fd5d5e1d6d7c53e5724837c6d2d69dda9c2a7715b35b57cb4cc5f3b22f1487f6f68fb6ceb695662614b45e07b76d0
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.cls_temp
- Size 48B
- SHA256 d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
- MD5 2390c1f21db00b20c07107e3ec7275fe
- SHA1 e663a646460acc071aebee942cc1776c23d77655
- SHA512 43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.json
- Size 202B
- SHA256 8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
- MD5 afa07370d07ed0a8ac9554ee7001bb72
- SHA1 d1e9de22fda1295087525ff3a377f7d7dd410ac7
- SHA512 a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.cls_temp
- Size 15B
- SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
- MD5 2566d27ce8c28d8961f082c375d7535e
- SHA1 92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
- SHA512 1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.json
- Size 55B
- SHA256 3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
- MD5 5caea4b68c57072f7f52a5a41720566c
- SHA1 4d9712f1702c7238949da43f7d8ae6efb233a666
- SHA512 fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
- Size 394B
- SHA256 cbb73fa7d82b0fedfbff0e5201edd4d5177b0f03560a281282063a5ad2e828ea
- MD5 4ed1f076bb1d3503a1fddb86da892e86
- SHA1 7882bd0cd42ac87fd5caf358d6d1a549b2ea1172
- SHA512 5e60b3bbed85665fcf1af01d86779d03a629f0ceb86c3cc65fb5c501f93577d984717d413ed242bc4a1a654a47005399cb96029c5bc2cb9fddea01dbe75bad8c
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
- Size 823B
- SHA256 24eb568b5298ab09c00f784584e799f518ba25de8afb8ceef0ef855e7be8ee3d
- MD5 d2ee3d2dd8d2bff7955555f8879d1334
- SHA1 3bc372f64eedd777487ebfca799d3e9140ccdc3e
- SHA512 3c99ffe5ec5b844ff418d58f723b14323e4c1aca127058cb15789662e11d68318b9fb5cc4071e93113279413c5ab35fbe2209f8aa854745b4a9a3f638ac9b493
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
- Size 16B
- SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
- MD5 c33583fae4e0b61cde1c5b9227963237
- SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
- SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
- MD5 SHA1 SHA512
- Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3aa29595-6538-4662-b840-f000870e1985_1708441640529.tap
- Size 319B
- SHA256 240b63b2816d1e6b4605ee540827733a8ed3417c5403a4d0272712a92cd003fe
- MD5 b1e397645d7aa26e7c77eb85f4fde896
- SHA1 47370de0635eb250cbaccf3f0d63d292371e3ede
- SHA512 960866b337323c4bf9ae982727c92fc4386d18c73b2821041a41c22dff4f46679d936091529a4a903e61b8bbed347ff7d79be9992544b9802a83fa30fc494ae8
- MD5 SHA1 SHA512