Resubmissions

03/05/2024, 17:30

240503-v3bn2aeg5810

03/05/2024, 15:32

240503-syk1ssdb3710

29/04/2024, 16:36

240429-t4ld7aff4v10

20/02/2024, 15:07

240220-shaj5aah266

Analysis

  • max time kernel
    77s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/02/2024, 15:07

General

  • Target
    Clash royale.apk
  • Size 3.2MB
  • Sample240220-shaj5aah26
  • SHA256 eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.ClashRoyale
    1⤵
    • Acquires the wake lock
    PID:4962

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core.db

        • Path /data/data/com.ClashRoyale/databases/core.db
        • Size 27KB
        • SHA256 cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7b55f327a56090b3f4bbd2c02de12c564a30aa9dc8703ed3139fd7544beb5e00
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ea6d8d0cf13aa30a5d489b9a92110556023c09c231724e81493d5cb7f99c53ac
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 0afda0a542007e339f057d35c0eb2458d233be2f3033ef5108800de90ed48591
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e0fd0415dc913793858d4ecd81afc0b1a88ca02b6cf37f5951eed27fb705996c
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 246fb5d47bf25fe1856c517ab12b1c651ebcf55905519f72032531aa93cec51c
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5f3fe4a3535f9a7e74045fac73a79fcee3103781e7bb3b5a799ca2fd91570117
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2aa8647b47b4d5a6855c0d09dca446b4a24ddbcfab1df26345edd80350bdbb07
        • MD5 SHA1 SHA512 SSDEEP

        65D4C021015C-0001-1362-42FBC8A96B10BeginSession.cls_temp

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.cls_temp
        • Size 77B
        • SHA256 347b03773b4452130bbaf72cac4f9cc2f81d225d3375f7a78601975e6b5537e5
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10BeginSession.json

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.json
        • Size 132B
        • SHA256 3a8c495c7739c34365d66cf1077a4ef1add2271139eb566aa8b299dafbc3bd4b
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10SessionApp.cls_temp

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.cls_temp
        • Size 107B
        • SHA256 bf739376e4921445c16043f1b6776480bfbceb1f1575aed3b15dd4d4d0cac7b6
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10SessionApp.json

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.json
        • Size 221B
        • SHA256 a586e78a0c40ba3b3f9e3ab8887e43a8282c53c327a39b9d6d21535a2876a271
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.cls_temp

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.cls_temp
        • Size 48B
        • SHA256 d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.json

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.json
        • Size 202B
        • SHA256 8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10SessionOS.cls_temp

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.cls_temp
        • Size 15B
        • SHA256 5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
        • MD5 SHA1 SHA512

        65D4C021015C-0001-1362-42FBC8A96B10SessionOS.json

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.json
        • Size 55B
        • SHA256 3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 394B
        • SHA256 cbb73fa7d82b0fedfbff0e5201edd4d5177b0f03560a281282063a5ad2e828ea
        • MD5 SHA1 SHA512

        session_analytics.tap

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 823B
        • SHA256 24eb568b5298ab09c00f784584e799f518ba25de8afb8ceef0ef855e7be8ee3d
        • MD5 SHA1 SHA512

        session_analytics.tap.tmp

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_3aa29595-6538-4662-b840-f000870e1985_1708441640529.tap

        • Path /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3aa29595-6538-4662-b840-f000870e1985_1708441640529.tap
        • Size 319B
        • SHA256 240b63b2816d1e6b4605ee540827733a8ed3417c5403a4d0272712a92cd003fe
        • MD5 SHA1 SHA512