Overview

overview

10

Static

static

10

Clash royale.apk

android-9-x86

10

Clash royale.apk

android-11-x64

10

Resubmissions

03/05/2024, 17:30

240503-v3bn2aeg5810

03/05/2024, 15:32

240503-syk1ssdb3710

29/04/2024, 16:36

240429-t4ld7aff4v10

20/02/2024, 15:07

240220-shaj5aah266

Analysis

  • max time kernel
    29s
  • max time network
    40s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    29/04/2024, 16:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Clash royale.apk
  • Size 3.2MB
  • Sample240429-t4ld7aff4v
  • SHA256 eeac062c8c9149a6739371238b857f18fb8a61c146443a972d1eb201d504216c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
truthspybankerdiscoveryevasioninfostealerspywaretrojan

Malware Config

Extracted

Family

  • truthspy

C2

  • http://protocol-a748.thetruthspy.com/protocols

Signatures

Processes

  • com.ClashRoyale
    1⤵
    • Checks memory information
    • Acquires the wake lock
    PID:4459

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core.db
        • Path /data/user/0/com.ClashRoyale/databases/core.db
        • Size 27KB
        • SHA256 cc9e08d0728cef73f1f391fc1486845d285b6a14d778ef14c0ac2401e6b3fde0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ddd6448554e05f109bcab74eb63c20ebd9612a1b88f701563419c914cee2298
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 447398f897afad0dd2398eb81daa008371036668fe7c87470400e980712ac798
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2b20b7b0c554b7b3034fe8a36a0c9e4e7a0449a236c81202160ceac31e94933b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7217855fe02d58ac7285c8253b1b487c36c32dcf606e00908ffa96a4edab982b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5a6a66f15b99c60f0944792b031b68cb0d394c4784bab1ff16c144c948330e09
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0e8a0f96ad0ddba59669ec7eb841907c97d4830e17bb3d82cfc1755772bbcfae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f9430d1c5ff75b42933ccb30de1e0a88473121d3433c454f79a826fca6c76b8e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ec3793199d2f681392456581de15c23510a983acc07b09ffb7fb320a1ecdb385
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e0e3d5b3b5fd96cbe29f7942b29a8ee56296592ba272dc2b50dca6609057b44d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a5506a696d3c1cb9834ca0da0949d15ff6ccf3d28c03715e9d676e1cb77576a3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5a4c6fcdede7bea91ec3cbdb01b7e41a96c0ed71ea28dcbacf87396e7cd4f5c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.ClashRoyale/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 9b735a15ce44623fad1d51da01f2bd05dcd81e228e70d5356f2a6865f9c778d4
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FBeginSession.cls_temp
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FBeginSession.cls_temp
        • Size 77B
        • SHA256 aea895daa62d965237a8ac023d873cb9ae64b61ff789bad4acd1fa4deac01bd5
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FBeginSession.json
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FBeginSession.json
        • Size 132B
        • SHA256 deb8f1c0796f462b7ad76514bf2b612c986ddc22dab0ec8f6c70d1e67d7a2b46
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FSessionApp.cls_temp
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FSessionApp.cls_temp
        • Size 107B
        • SHA256 3eb8cfd8d1d68125a5eca74a46951f73728ca792f570617c6949c94ee3ed63d6
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FSessionApp.json
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FSessionApp.json
        • Size 221B
        • SHA256 b40a5cdbc81bec0cca278142c7d518ecc23d2f88c974dc2cb470c5953c4b4c6b
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FSessionDevice.cls_temp
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FSessionDevice.cls_temp
        • Size 48B
        • SHA256 7400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FSessionDevice.json
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FSessionDevice.json
        • Size 202B
        • SHA256 78809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FSessionOS.cls_temp
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FSessionOS.cls_temp
        • Size 15B
        • SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
        • MD5 SHA1 SHA512
        Submit Download

        662FCCAC034C-0001-116B-A9ECF78E6C6FSessionOS.json
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/662FCCAC034C-0001-116B-A9ECF78E6C6FSessionOS.json
        • Size 55B
        • SHA256 b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 2KB
        • SHA256 a525c5024bcfaf238587590bdea90c84ac5be9dfac50f2c5d3667f8be07e9c78
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 394B
        • SHA256 c7ac6234e0d80e91a333a8673f335c1567db5abd68da6d8cd4bcd4ef3a067d0b
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap.tmp
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        sa_96231bd8-3343-48f3-8aa2-c0498b77cbba_1714408621914.tap
        • Path /data/user/0/com.ClashRoyale/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_96231bd8-3343-48f3-8aa2-c0498b77cbba_1714408621914.tap
        • Size 317B
        • SHA256 847292f26fa9c59b078909c4d6ffc775337e1036749db4fa666e3e4620d4b200
        • MD5 SHA1 SHA512
        Submit Download