Resubmissions
03/05/2024, 17:30
240503-v3bn2aeg58 1003/05/2024, 15:32
240503-syk1ssdb37 1029/04/2024, 16:36
240429-t4ld7aff4v 1020/02/2024, 15:07
240220-shaj5aah26 6Analysis
-
max time kernel
77s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20/02/2024, 15:07
Static task
static1
Behavioral task
behavioral1
Sample
Clash royale.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
Clash royale.apk
Resource
android-x64-20231215-en
General
-
Target
Clash royale.apk
-
Size
3.2MB
-
MD5
f2b9ffb8bb4684754a7e1eb02f1added
-
SHA1
b3d4a329b035a97c21f09698eb20e3db732aed82
-
SHA256
eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c
-
SHA512
37ca4bedd0054ab5233b441861e9c30f128238e75849ef744195d92e5c0a8f5da6db633c95b05397a978d0f7bdb31be4c2cfbf696687a3e968dc5cef17043345
-
SSDEEP
98304:F1yqxOabNLn7Rk3H0bbamJL4F/E+roUWwvlL1K:zLwyNLVcCJk6+rotsl4
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ClashRoyale -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
27KB
MD5c7b5801f4970b944a556dda8d75097f6
SHA1ab62d5c3d60940ac286f019fecd21f822af864f2
SHA256cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
SHA5126ac93f5393ce957d0be7de34145f433285f6ee37f6037f174f4532502da62218dddfc0e32883bf94830b4c79f63aa16cf10b3fa7b6eb4187b72f7703b6e0f0c1
-
Filesize
16KB
MD514f58c5e55247e994d13ab8fdaaf26d3
SHA1d56987d48ff3e134337281c00912a92d5d6e2030
SHA2567b55f327a56090b3f4bbd2c02de12c564a30aa9dc8703ed3139fd7544beb5e00
SHA5129c2b2306f55f49b070c8447d8c59801a126a71cada2df98e3892218c389763b7eaadbd84c2d22bbc54a9c91bbb26b437106a293c2ba3f2beb2e27a6bfa59a681
-
Filesize
16KB
MD5188c0542bc062e48b614e5ca8c1081af
SHA10eb9b89a5c92957cd1fe748cc063b32853339774
SHA256c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
SHA51262a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4
-
Filesize
8KB
MD56913bd48cb2f9c0e5fd51b472680ae9c
SHA1e1c29bb73f94f30ddf02d3cfa80c786e97840d8f
SHA256ea6d8d0cf13aa30a5d489b9a92110556023c09c231724e81493d5cb7f99c53ac
SHA512b3f03eb8d9a6a989242712fed94424ea56072c97186ab83c81de77d0c8d2b388fb7fd15eb5f8ccc507cd1ab93e686a78081242dd582d88ad13321064284e3589
-
Filesize
512B
MD56214f8879f5d51dd3e68e6bfeb2f137f
SHA1bf59c752b3382909eaf7291c33702d9e09d7cc57
SHA2560afda0a542007e339f057d35c0eb2458d233be2f3033ef5108800de90ed48591
SHA5120a817b09d9347730529cb81a47b38dc840b4325efbc3fcdf7302c53545df94b15d7b3170eaa67fcbe75513e26991656e3243ee528bd90975cd68b7ea8a7d3186
-
Filesize
8KB
MD55f919889e81626453942a5138b44b499
SHA1b7f38c9a6b8f3fd416aa262be2e071fabb155308
SHA256e0fd0415dc913793858d4ecd81afc0b1a88ca02b6cf37f5951eed27fb705996c
SHA512f9beb3a4c44f4ecd5fe2f925c1563213e0a93f0bcc2624dd2f7a887b093a73fb8afee1c5097fce39152bc10908938916340dec8d56d51c56eff06428992bbb25
-
Filesize
4KB
MD538a9d1bcf524fb2911af5f7b3c8b3bc7
SHA1f81dba5426d2705d4e4e2272ac33144b62cbdc70
SHA256246fb5d47bf25fe1856c517ab12b1c651ebcf55905519f72032531aa93cec51c
SHA512a2a9bf6eaed53dbf986a87309404d382098f510102545d56d46d14687475941b25294205464f1bfc09b06d6def655692427fd2d0749343e6a8430be4b72818e6
-
Filesize
8KB
MD545d8a195465d81a18a209a95b082eeaa
SHA11024c5007226810458e570a42dc254a445a1e116
SHA2565f3fe4a3535f9a7e74045fac73a79fcee3103781e7bb3b5a799ca2fd91570117
SHA51243c3f67c733c12a042a060d1fc9f7eadc4c353a06e331a5ade20265a5fba7876a2b84fc430a05681b819aec351f5ec260388c9c5f30a258a681d887ae48d26e5
-
Filesize
8KB
MD5726bb26408294b4dbee00fe216af05b7
SHA141b94cd7ddfd73692c16447200c35ea6990bd4dd
SHA2562aa8647b47b4d5a6855c0d09dca446b4a24ddbcfab1df26345edd80350bdbb07
SHA512616cdf6af0ddfb5c2a9c2fd75663a62ee420418fc680c3bf4d50bd22fdf51db38e09a567a02469f5ff750b49130c3772e1d8ff5604b8ddd0df1c3191c8b40da4
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.cls_temp
Filesize77B
MD5ef8f9d5e750d303bf283c8939bd652a7
SHA12ca42f4e75b3b2aeca250ecaa57b5966872fc587
SHA256347b03773b4452130bbaf72cac4f9cc2f81d225d3375f7a78601975e6b5537e5
SHA512e05149e4f86630a185f748849b509ba22dcda853b221d27556145547b54b43f9d9e623b22ab6ce0c53dbbc2def6b92cce248b21bfdb911999481e86f48113da0
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10BeginSession.json
Filesize132B
MD516a9e5c2f5e317ae09a0a3bb94b9791b
SHA1ecafff484f7507b3fff80ea53ea7261eec914480
SHA2563a8c495c7739c34365d66cf1077a4ef1add2271139eb566aa8b299dafbc3bd4b
SHA512f026900f04ed571ea1bc00ab63c49cc1fbc8d3c890ccc2b97f72489673ed51aa152074ced26808cfd599595fa37d124ba0b8bc27936a5e9679df9b9522769c72
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.cls_temp
Filesize107B
MD54e31292a42c836257a990dacfef86e98
SHA11462afefecc8cf5912f7d92cef438d54298840f3
SHA256bf739376e4921445c16043f1b6776480bfbceb1f1575aed3b15dd4d4d0cac7b6
SHA512207969f3bc3776d4f87e37f4ee878140864d7284a21e07bab917d47c41be99d3d20892165bac6ed789eb6f269e450a276caf76e1fb9944fd03e7611077b80817
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionApp.json
Filesize221B
MD546ef494728046f6a9885b3ef8b56d2c7
SHA1b989c2dc9a11f46547c40699dc47d3360b96b607
SHA256a586e78a0c40ba3b3f9e3ab8887e43a8282c53c327a39b9d6d21535a2876a271
SHA5128fe395f4de5c21fbcd5be6bf45476ddf3d1fd5d5e1d6d7c53e5724837c6d2d69dda9c2a7715b35b57cb4cc5f3b22f1487f6f68fb6ceb695662614b45e07b76d0
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.cls_temp
Filesize48B
MD52390c1f21db00b20c07107e3ec7275fe
SHA1e663a646460acc071aebee942cc1776c23d77655
SHA256d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
SHA51243ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionDevice.json
Filesize202B
MD5afa07370d07ed0a8ac9554ee7001bb72
SHA1d1e9de22fda1295087525ff3a377f7d7dd410ac7
SHA2568d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
SHA512a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.cls_temp
Filesize15B
MD52566d27ce8c28d8961f082c375d7535e
SHA192fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA2565acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA5121c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65D4C021015C-0001-1362-42FBC8A96B10SessionOS.json
Filesize55B
MD55caea4b68c57072f7f52a5a41720566c
SHA14d9712f1702c7238949da43f7d8ae6efb233a666
SHA2563223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
SHA512fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f
-
Filesize
394B
MD54ed1f076bb1d3503a1fddb86da892e86
SHA17882bd0cd42ac87fd5caf358d6d1a549b2ea1172
SHA256cbb73fa7d82b0fedfbff0e5201edd4d5177b0f03560a281282063a5ad2e828ea
SHA5125e60b3bbed85665fcf1af01d86779d03a629f0ceb86c3cc65fb5c501f93577d984717d413ed242bc4a1a654a47005399cb96029c5bc2cb9fddea01dbe75bad8c
-
Filesize
823B
MD5d2ee3d2dd8d2bff7955555f8879d1334
SHA13bc372f64eedd777487ebfca799d3e9140ccdc3e
SHA25624eb568b5298ab09c00f784584e799f518ba25de8afb8ceef0ef855e7be8ee3d
SHA5123c99ffe5ec5b844ff418d58f723b14323e4c1aca127058cb15789662e11d68318b9fb5cc4071e93113279413c5ab35fbe2209f8aa854745b4a9a3f638ac9b493
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3aa29595-6538-4662-b840-f000870e1985_1708441640529.tap
Filesize319B
MD5b1e397645d7aa26e7c77eb85f4fde896
SHA147370de0635eb250cbaccf3f0d63d292371e3ede
SHA256240b63b2816d1e6b4605ee540827733a8ed3417c5403a4d0272712a92cd003fe
SHA512960866b337323c4bf9ae982727c92fc4386d18c73b2821041a41c22dff4f46679d936091529a4a903e61b8bbed347ff7d79be9992544b9802a83fa30fc494ae8