Analysis

  • max time kernel
    33s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    11/05/2026, 12:11

General

  • Target
    clasha-android.apk
  • Size 21.5MB
  • Sample260511-pc4dgacv5p
  • SHA256 7da7dc5fd644ddce4dcbb25e8dcea2484ad9005325c64ef3a3c13fee4fd61936
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

Processes

  • com.github.ccg.clasha
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4818
  • com.github.ccg.clasha:bg
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4882

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.work.workdb

        • Path /data/user/0/com.github.ccg.clasha/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/user/0/com.github.ccg.clasha/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 d998c8f60997c8f034d3aee61b183b8786ee7cad90a02254d996568b7bf2764b
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-shm

        • Path /data/user/0/com.github.ccg.clasha/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 f99797437ccb3b1ed74031d2f4bb062fe751502abb34090f85cdebbf2e761b21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/user/0/com.github.ccg.clasha/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 b47d5515653a5ba669eded4c267016bc5fac146285664028830dd6a3b4325e56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/user/0/com.github.ccg.clasha/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 910cca354770dd1358836839eee20d6f5d9553ffd236b0b8487ec313c8ff5283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        priConfig.db-journal

        • Path /data/user/0/com.github.ccg.clasha/databases/priConfig.db-journal
        • Size 512B
        • SHA256 aceba1a9577e05b5114b20bf613e0afae5220125ae79a49d56483f39b4ff672a
        • MD5 SHA1 SHA512

        priConfig.db-wal

        • Path /data/user/0/com.github.ccg.clasha/databases/priConfig.db-wal
        • Size 16KB
        • SHA256 6304a32273e754ca2350bf05409d06fcf2b37e7047f2c081048dd3fc6eebddaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        priConfig.db-wal

        • Path /data/user/0/com.github.ccg.clasha/databases/priConfig.db-wal
        • Size 36KB
        • SHA256 e51c28bc094668a69f9fc7bbf5a0b990c873647c48aff0c99cf0eca398d0a133
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Country.mmdb

        • Path /data/user/0/com.github.ccg.clasha/files/Country.mmdb
        • Size 3.9MB
        • SHA256 ad1895ccf2c6fe0804e0506a92bd9eed1a9256a84f5443694c4fca67f9a47b26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pubConfig.db-journal

        • Path /data/user_de/0/com.github.ccg.clasha/databases/pubConfig.db-journal
        • Size 512B
        • SHA256 be871ec93badbbba1e36afe75a59ca8c77caf94e23b4a35de5d277ebc869592e
        • MD5 SHA1 SHA512

        pubConfig.db-shm

        • Path /data/user_de/0/com.github.ccg.clasha/databases/pubConfig.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        pubConfig.db-wal

        • Path /data/user_de/0/com.github.ccg.clasha/databases/pubConfig.db-wal
        • Size 16KB
        • SHA256 9763783f0da26a5fe303c5aa0cf81d2912a99af8f52d3ac5291514b9704d9e57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pubConfig.db-wal

        • Path /data/user_de/0/com.github.ccg.clasha/databases/pubConfig.db-wal
        • Size 36KB
        • SHA256 46a33143bf01ba1d75eef79bb29c85cb37daef7a08a3c3dc35cfb1f06d57cd31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6A01C8670222-0001-12D2-8A3247E5F994BeginSession.cls_temp

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994BeginSession.cls_temp
        • Size 77B
        • SHA256 f98e65817dabaf9fff75e52df7aae6f2badd70e2c416061bc6d4ec93a017c707
        • MD5 SHA1 SHA512 TLSH

        6A01C8670222-0001-12D2-8A3247E5F994BeginSession.json

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994BeginSession.json
        • Size 203B
        • SHA256 17cfcb8518203529de6e288ea03820ab37b30b226e335de7ff507a0c4a945a23
        • MD5 SHA1 SHA512 TLSH

        6A01C8670222-0001-12D2-8A3247E5F994SessionApp.cls_temp

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994SessionApp.cls_temp
        • Size 116B
        • SHA256 51af2f5ad61225faf83be714304fac818c796d3572dc9634ac6d64a20a25b8e3
        • MD5 SHA1 SHA512 TLSH

        6A01C8670222-0001-12D2-8A3247E5F994SessionApp.json

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994SessionApp.json
        • Size 230B
        • SHA256 57cee4207f04d0e7461ef9422a3f052abaefe8fab3d72829ae594da3b9a5ac68
        • MD5 SHA1 SHA512 TLSH

        6A01C8670222-0001-12D2-8A3247E5F994SessionDevice.cls_temp

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994SessionDevice.cls_temp
        • Size 49B
        • SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
        • MD5 SHA1 SHA512

        6A01C8670222-0001-12D2-8A3247E5F994SessionOS.cls_temp

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994SessionOS.cls_temp
        • Size 15B
        • SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
        • MD5 SHA1 SHA512

        6A01C8670222-0001-12D2-8A3247E5F994SessionOS.json

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A01C8670222-0001-12D2-8A3247E5F994SessionOS.json
        • Size 56B
        • SHA256 3a5df913db77290768c5dfbdfd65b218dfa34b7999441f5cc87797e4b65e445c
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 434B
        • SHA256 87cc83b7714a36d91d26b3349c0b9e2b90984d717671f1df6ceecb64305a5c6b
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap.tmp

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_7cc124e7-3037-4e59-8e4c-91ee0c77ac82_1778501736046.tap

        • Path /data/user_de/0/com.github.ccg.clasha/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_7cc124e7-3037-4e59-8e4c-91ee0c77ac82_1778501736046.tap
        • Size 348B
        • SHA256 ea00bf00865e13ce5067de395270cdefce1881234e9afabfe05f8659786d5efc
        • MD5 SHA1 SHA512 TLSH