Resubmissions

03/05/2024, 17:30

240503-v3bn2aeg58 10

03/05/2024, 15:32

240503-syk1ssdb37 10

29/04/2024, 16:36

240429-t4ld7aff4v 10

20/02/2024, 15:07

240220-shaj5aah26 6

Analysis

  • max time kernel
    77s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/02/2024, 15:07

General

  • Target

    Clash royale.apk

  • Size

    3.2MB

  • MD5

    f2b9ffb8bb4684754a7e1eb02f1added

  • SHA1

    b3d4a329b035a97c21f09698eb20e3db732aed82

  • SHA256

    eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c

  • SHA512

    37ca4bedd0054ab5233b441861e9c30f128238e75849ef744195d92e5c0a8f5da6db633c95b05397a978d0f7bdb31be4c2cfbf696687a3e968dc5cef17043345

  • SSDEEP

    98304:F1yqxOabNLn7Rk3H0bbamJL4F/E+roUWwvlL1K:zLwyNLVcCJk6+rotsl4

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.ClashRoyale
    1⤵
    • Acquires the wake lock
    PID:4962

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.ClashRoyale/databases/core.db

          Filesize

          27KB

          MD5

          c7b5801f4970b944a556dda8d75097f6

          SHA1

          ab62d5c3d60940ac286f019fecd21f822af864f2

          SHA256

          cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0

          SHA512

          6ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          14f58c5e55247e994d13ab8fdaaf26d3

          SHA1

          d56987d48ff3e134337281c00912a92d5d6e2030

          SHA256

          7b55f327a56090b3f4bbd2c02de12c564a30aa9dc8703ed3139fd7544beb5e00

          SHA512

          9c2b2306f55f49b070c8447d8c59801a126a71cada2df98e3892218c389763b7eaadbd84c2d22bbc54a9c91bbb26b437106a293c2ba3f2beb2e27a6bfa59a681

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          188c0542bc062e48b614e5ca8c1081af

          SHA1

          0eb9b89a5c92957cd1fe748cc063b32853339774

          SHA256

          c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b

          SHA512

          62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          6913bd48cb2f9c0e5fd51b472680ae9c

          SHA1

          e1c29bb73f94f30ddf02d3cfa80c786e97840d8f

          SHA256

          ea6d8d0cf13aa30a5d489b9a92110556023c09c231724e81493d5cb7f99c53ac

          SHA512

          b3f03eb8d9a6a989242712fed94424ea56072c97186ab83c81de77d0c8d2b388fb7fd15eb5f8ccc507cd1ab93e686a78081242dd582d88ad13321064284e3589

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          6214f8879f5d51dd3e68e6bfeb2f137f

          SHA1

          bf59c752b3382909eaf7291c33702d9e09d7cc57

          SHA256

          0afda0a542007e339f057d35c0eb2458d233be2f3033ef5108800de90ed48591

          SHA512

          0a817b09d9347730529cb81a47b38dc840b4325efbc3fcdf7302c53545df94b15d7b3170eaa67fcbe75513e26991656e3243ee528bd90975cd68b7ea8a7d3186

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          5f919889e81626453942a5138b44b499

          SHA1

          b7f38c9a6b8f3fd416aa262be2e071fabb155308

          SHA256

          e0fd0415dc913793858d4ecd81afc0b1a88ca02b6cf37f5951eed27fb705996c

          SHA512

          f9beb3a4c44f4ecd5fe2f925c1563213e0a93f0bcc2624dd2f7a887b093a73fb8afee1c5097fce39152bc10908938916340dec8d56d51c56eff06428992bbb25

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

          Filesize

          4KB

          MD5

          38a9d1bcf524fb2911af5f7b3c8b3bc7

          SHA1

          f81dba5426d2705d4e4e2272ac33144b62cbdc70

          SHA256

          246fb5d47bf25fe1856c517ab12b1c651ebcf55905519f72032531aa93cec51c

          SHA512

          a2a9bf6eaed53dbf986a87309404d382098f510102545d56d46d14687475941b25294205464f1bfc09b06d6def655692427fd2d0749343e6a8430be4b72818e6

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          45d8a195465d81a18a209a95b082eeaa

          SHA1

          1024c5007226810458e570a42dc254a445a1e116

          SHA256

          5f3fe4a3535f9a7e74045fac73a79fcee3103781e7bb3b5a799ca2fd91570117

          SHA512

          43c3f67c733c12a042a060d1fc9f7eadc4c353a06e331a5ade20265a5fba7876a2b84fc430a05681b819aec351f5ec260388c9c5f30a258a681d887ae48d26e5

        • /data/data/com.ClashRoyale/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          726bb26408294b4dbee00fe216af05b7

          SHA1

          41b94cd7ddfd73692c16447200c35ea6990bd4dd

          SHA256

          2aa8647b47b4d5a6855c0d09dca446b4a24ddbcfab1df26345edd80350bdbb07

          SHA512

          616cdf6af0ddfb5c2a9c2fd75663a62ee420418fc680c3bf4d50bd22fdf51db38e09a567a02469f5ff750b49130c3772e1d8ff5604b8ddd0df1c3191c8b40da4

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.cls_temp

          Filesize

          77B

          MD5

          ef8f9d5e750d303bf283c8939bd652a7

          SHA1

          2ca42f4e75b3b2aeca250ecaa57b5966872fc587

          SHA256

          347b03773b4452130bbaf72cac4f9cc2f81d225d3375f7a78601975e6b5537e5

          SHA512

          e05149e4f86630a185f748849b509ba22dcda853b221d27556145547b54b43f9d9e623b22ab6ce0c53dbbc2def6b92cce248b21bfdb911999481e86f48113da0

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.json

          Filesize

          132B

          MD5

          16a9e5c2f5e317ae09a0a3bb94b9791b

          SHA1

          ecafff484f7507b3fff80ea53ea7261eec914480

          SHA256

          3a8c495c7739c34365d66cf1077a4ef1add2271139eb566aa8b299dafbc3bd4b

          SHA512

          f026900f04ed571ea1bc00ab63c49cc1fbc8d3c890ccc2b97f72489673ed51aa152074ced26808cfd599595fa37d124ba0b8bc27936a5e9679df9b9522769c72

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.cls_temp

          Filesize

          107B

          MD5

          4e31292a42c836257a990dacfef86e98

          SHA1

          1462afefecc8cf5912f7d92cef438d54298840f3

          SHA256

          bf739376e4921445c16043f1b6776480bfbceb1f1575aed3b15dd4d4d0cac7b6

          SHA512

          207969f3bc3776d4f87e37f4ee878140864d7284a21e07bab917d47c41be99d3d20892165bac6ed789eb6f269e450a276caf76e1fb9944fd03e7611077b80817

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.json

          Filesize

          221B

          MD5

          46ef494728046f6a9885b3ef8b56d2c7

          SHA1

          b989c2dc9a11f46547c40699dc47d3360b96b607

          SHA256

          a586e78a0c40ba3b3f9e3ab8887e43a8282c53c327a39b9d6d21535a2876a271

          SHA512

          8fe395f4de5c21fbcd5be6bf45476ddf3d1fd5d5e1d6d7c53e5724837c6d2d69dda9c2a7715b35b57cb4cc5f3b22f1487f6f68fb6ceb695662614b45e07b76d0

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.cls_temp

          Filesize

          48B

          MD5

          2390c1f21db00b20c07107e3ec7275fe

          SHA1

          e663a646460acc071aebee942cc1776c23d77655

          SHA256

          d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699

          SHA512

          43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.json

          Filesize

          202B

          MD5

          afa07370d07ed0a8ac9554ee7001bb72

          SHA1

          d1e9de22fda1295087525ff3a377f7d7dd410ac7

          SHA256

          8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d

          SHA512

          a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.cls_temp

          Filesize

          15B

          MD5

          2566d27ce8c28d8961f082c375d7535e

          SHA1

          92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

          SHA256

          5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

          SHA512

          1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.json

          Filesize

          55B

          MD5

          5caea4b68c57072f7f52a5a41720566c

          SHA1

          4d9712f1702c7238949da43f7d8ae6efb233a666

          SHA256

          3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363

          SHA512

          fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          394B

          MD5

          4ed1f076bb1d3503a1fddb86da892e86

          SHA1

          7882bd0cd42ac87fd5caf358d6d1a549b2ea1172

          SHA256

          cbb73fa7d82b0fedfbff0e5201edd4d5177b0f03560a281282063a5ad2e828ea

          SHA512

          5e60b3bbed85665fcf1af01d86779d03a629f0ceb86c3cc65fb5c501f93577d984717d413ed242bc4a1a654a47005399cb96029c5bc2cb9fddea01dbe75bad8c

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          823B

          MD5

          d2ee3d2dd8d2bff7955555f8879d1334

          SHA1

          3bc372f64eedd777487ebfca799d3e9140ccdc3e

          SHA256

          24eb568b5298ab09c00f784584e799f518ba25de8afb8ceef0ef855e7be8ee3d

          SHA512

          3c99ffe5ec5b844ff418d58f723b14323e4c1aca127058cb15789662e11d68318b9fb5cc4071e93113279413c5ab35fbe2209f8aa854745b4a9a3f638ac9b493

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3aa29595-6538-4662-b840-f000870e1985_1708441640529.tap

          Filesize

          319B

          MD5

          b1e397645d7aa26e7c77eb85f4fde896

          SHA1

          47370de0635eb250cbaccf3f0d63d292371e3ede

          SHA256

          240b63b2816d1e6b4605ee540827733a8ed3417c5403a4d0272712a92cd003fe

          SHA512

          960866b337323c4bf9ae982727c92fc4386d18c73b2821041a41c22dff4f46679d936091529a4a903e61b8bbed347ff7d79be9992544b9802a83fa30fc494ae8