Analysis

  • max time kernel
    3667478s
  • max time network
    111s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    04/12/2022, 01:43

General

  • Target

    com-mod-bad-piggies-hd-mod-v2-4-3297-unlockeda-lot-of-money-3297.apk

  • Size

    77.5MB

  • MD5

    2e68857e396e3331782f54ffe6b0861e

  • SHA1

    3aec9b6abad31bafaa51a3fbf4db1ecf92e6bcae

  • SHA256

    78f1623ae350a9b989234baf205546680781409994796d29c7052620f76a519a

  • SHA512

    70cfd7ef21d6c7fffe3bcc6778965fad67801d80e0fec1ce52f7e5b0b83dbaaac6a97e11958d5f03914ce65592d634f7b92a83e83b1f0234b7df5a40d66bd93f

  • SSDEEP

    1572864:FD9698j71m7SA5HjucZLXpZjyE4pYcLNnCPS3uqrN8My/VYrNAQ6j1Y3:FZ6Ovg7S0BRZ+dISzr+vQ6G

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.rovio.BadPiggiesHD
    1⤵
    • Loads dropped Dex/Jar
    PID:4115
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex --output-vdex-fd=92 --oat-fd=96 --oat-location=/data/user/0/com.rovio.BadPiggiesHD/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4206

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.rovio.BadPiggiesHD/databases/com.microsoft.appcenter.persistence

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.rovio.BadPiggiesHD/databases/com.microsoft.appcenter.persistence-journal

    Filesize

    524B

    MD5

    2ea33ce9b382be2be58abd5d410a64d4

    SHA1

    c2ef0ec4783421699b74b0df2a9a4234fe5cb7ab

    SHA256

    777ea26740f66da6d74a5dd04cd4d3f4b46dd3061534a8bd3a8aab396dfa9594

    SHA512

    0722bc4b0cffa896ead97780b2c1ae61a7580037313bf5397e1e5ad19091797ea383cf57a76980a21810557f5a38cb68aed2e40a3f74563057d18b072f7bfb10

  • /data/user/0/com.rovio.BadPiggiesHD/databases/com.microsoft.appcenter.persistence-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.rovio.BadPiggiesHD/databases/com.microsoft.appcenter.persistence-wal

    Filesize

    36KB

    MD5

    3bd7e2f7a0190ee02826b0324529bd4e

    SHA1

    9da4901a67bc4d9b1e5f3b02bf37f02ca7ba9adb

    SHA256

    16746819ef826f00d8abc1da87fc3d31d3d603aae157928fef6281a1641fadad

    SHA512

    3f3ac4bf458f25f9c945cdcac90fdc068a5cb3fc2cf123bd67c4d8fa7e6bc03805114fe2cb2b6d8397d258c3cb2e7c3dae26ba770a9888a2f082385d4fab300c

  • /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex

    Filesize

    3.2MB

    MD5

    42a776716f329899669f6d761d626003

    SHA1

    7c8a66fddabe92a33367f14c29f13955149223c1

    SHA256

    7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4

    SHA512

    bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1

  • /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex

    Filesize

    3.2MB

    MD5

    42a776716f329899669f6d761d626003

    SHA1

    7c8a66fddabe92a33367f14c29f13955149223c1

    SHA256

    7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4

    SHA512

    bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1

  • /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex

    Filesize

    3.2MB

    MD5

    55258aa35ea66319a0b9e241cf45e55e

    SHA1

    fe23a9a8cf0df7f455f8c16f5509a5552b0504f9

    SHA256

    f655c0adebf1ea986e596d3399ab2f587a21770c9daeba36ff566c220e34f5dc

    SHA512

    d0fc6294e0cce6a4aa5074a8360c97ff05148e641f5851c65b27d4ab398d26f9b6dbc93012fe47900e5dc3f7d586c6104f8b4adc885570f30ffc07fb2486a29f

  • /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex

    Filesize

    3.2MB

    MD5

    42a776716f329899669f6d761d626003

    SHA1

    7c8a66fddabe92a33367f14c29f13955149223c1

    SHA256

    7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4

    SHA512

    bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1

  • /data/user/0/com.rovio.BadPiggiesHD/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.rovio.BadPiggiesHD/no_backup/androidx.work.workdb-journal

    Filesize

    524B

    MD5

    410e32099339864f6160742c25ea431c

    SHA1

    8ccfec50387ce249b61f28b4f3c379179ea1968b

    SHA256

    1a3862c985d5cac6d86aec4bfaff2dd69c02d3899f977c5ac8611443a115132f

    SHA512

    58d00f011808f91e995b0d20325dd3562b2d92b5c9fd3d06380abe97ddff1ae4428b8bd8b94fd4f509e8fb50ef1ae6d26cc9200237525c6d420c80ab38517514

  • /data/user/0/com.rovio.BadPiggiesHD/no_backup/androidx.work.workdb-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.rovio.BadPiggiesHD/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    034ad7d748015132a3db43f3b8995d53

    SHA1

    a8536fc6dfa772ec66260c2e7da8260bc1cf66f1

    SHA256

    e2a8b6ba1be5c77c0f78fb76070a5813bdc3a389a09f0e53cc1d7c9f32951d64

    SHA512

    a643e99a8f030d2a6e6684038729668acb35d7f39a55b7895a7cc3fc088ec87bf74d3602f81fda276ddae4296e2286a6f41d56834fa5006fbe624896191543ca

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/AppCenter.xml

    Filesize

    161B

    MD5

    fbf7fc75fc428ee054daa2fda633bac8

    SHA1

    29c60f62666f46d670f4f6bae2bf3fa012d07269

    SHA256

    753e9ec8a8f0c87ebeb11b9acc2b3537805c0925db724e64f0b10b8bc411498d

    SHA512

    4f02c48f8c59cbd5ae9f8ce3b0958a87d4dfcef4c17abdb9dc22212e3249dd2bcf98af1ea3eaf46fdee6be4d0904f44ff721b5c9a679228ecfc0a11a3bc1f988

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/AppCenter.xml

    Filesize

    236B

    MD5

    98cdd8fbc9f548acf3febbf1f9f0f429

    SHA1

    10708fa7ca793daebcc0cfc78ee55dccbae7d5ce

    SHA256

    8390e842cf0bf634027c83d4634e414e9884f53c3e434232b340c6be27725ad4

    SHA512

    664c43f008546882a539672082bcba377ac1fea8c3ab170a54f03c0ce504301ecc57402758efd67b1c6969f24855a5688d15361b73670318c0cf3280b3bce3ce

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/app_set_id_storage.xml

    Filesize

    146B

    MD5

    6b205e55f7281e6ac40360a437b43449

    SHA1

    0a37503393c3f5072fe2b87c56958b44cd2d7c70

    SHA256

    13f5abedb1fcddde5023b2485ce9e1bbeea13f02e0c98fcc361251a27daca37d

    SHA512

    7a0293c495439a4ca5e51105d98839470efd00a0223877ecf739685c3e207f8060234e4eadc06d89bd9d3f2bd8b0b28d0e4837347e2e37266367d91d2abd9f77

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/app_set_id_storage.xml

    Filesize

    214B

    MD5

    c98a59f1ebee4fdc297e0bb6bc8fd50b

    SHA1

    f3b64be1bc9685157e35b2a8771b771abc1c64ab

    SHA256

    1d94d5e1300f425b26cad5c4eb407610fe98472d02f7c5b6b3cfa02ad1b4d9c5

    SHA512

    efe4915d6a3613b6c5cdc4bd029636eb1a26cf8715d78b31dd9a0963f1a0cfe1f633fe8d6825e682c17fd39f132068b5d1d741924c10458d906da30eed082f7c

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/app_set_id_storage.xml

    Filesize

    281B

    MD5

    427e837f18a945b69eec8e7ee31baef6

    SHA1

    1161232a6da53556e91479cd95827b0e866641e4

    SHA256

    1d577334e3ca04e3b76d87dd59aebce1fc5f3f8fd1d662914fee2f1242e440ec

    SHA512

    cc128998859372c4f3d19c3655ae97bc57f9dffa3452a0e4488706ee741db4710c5740520caef1f19a4d15782ff0dc7be09e12ec7fe0b1bc606f66ee949296f7

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/check.xml

    Filesize

    154B

    MD5

    b7bbb9e63deee5f8c00d71cc81fe0f0d

    SHA1

    989615662d75356b34db8649b70ee3b03a2ec215

    SHA256

    b346f329f863eeb7fecd3e1e01e9c2da525eb8b6d22a4bb4f2a3f3c0d7d0dd59

    SHA512

    39d284148b3441e277d5bff8c72c115ed5993b0e72782959bd8c9d76f7570ab414c62a7311804e53bb7517cf8f0131c9eba0bf31d0fb8a0d9a552dfb4746b455

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.internal.MODEL_STORE.xml

    Filesize

    1KB

    MD5

    8afd1fab2b82e02824485c2533f2d746

    SHA1

    6d7d0be96cbf846d3e373f5a04e68c3a42a4032f

    SHA256

    c2533aef486d2b0656eaabf03cd891fd7aa062720ef81680c01386a6d6b8d10a

    SHA512

    8c82bd09c72c1dcb84c7d8ef2bf898c480e25644f7501f668216b5bc56046e654b498b5c9877a4da6b163e4d96cb20a8909ed4fd0cb0b51d2b49fde893ec716b

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml

    Filesize

    3KB

    MD5

    52667209d4c56b62d48b0d6c79e010f2

    SHA1

    026182cd129bef3369693e3ae96b5702ba08580a

    SHA256

    8cfd6f253ab85a651f22282a0c3b82ce23ffc4344a039ee21eb65eceb8d88a61

    SHA512

    ac3eb04392ca50000bbc56a9c555a5a302258e0ef83d6059b6f364ca1857f6fc32c925faebf59d87893ecf4aeb37d88e8da693dd58e2d0f232f78ef6e3eb741a

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml

    Filesize

    1KB

    MD5

    423b3116d65196093bae8bf7867c1418

    SHA1

    d3074d7fca21b93649d70c1f126eb984d6c3c82d

    SHA256

    65055113b41ca6735476de187715e86c71e20a112b84d95920f91c87dd8890da

    SHA512

    4bda403de22cafaeab885a78371e3d85b6aba308c64fe816d7c628513f3c44af12ef42a15562eb25136cef43d1b8e7d2b82e50df89cc654c77fd2dbecb3f855d

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml

    Filesize

    139B

    MD5

    34d145a1f9d7290f517f621b0e5635bd

    SHA1

    89108d6cae8d351c53efb5b70991fea2deaa8e64

    SHA256

    777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e

    SHA512

    ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    203B

    MD5

    42cf8a822b2acf0159a1a03b102cc560

    SHA1

    a85fd96b3767ea3d5457c785169d17fccba80bf2

    SHA256

    10f10ef9709f0b0d16df6bb7bb0f175666d6a4fe35e93f90dfbc482e4935f674

    SHA512

    ca62a534035bed1b3bcf22d53c56f11d73af59bc88bd83cd61503e5268b9fc3f2062ea27e541aee51b7bccb8a10d5d41ed6fb6f57399d23f66c193e3d20bfd6f

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    160B

    MD5

    c0af82db5c3ad86238030a93b19ed682

    SHA1

    8b0744d34c95c2fa58ee2e4fa3d5bd77ae79075b

    SHA256

    80ee699ed35f84c97a426f84d93e514cf8f055047081ea93ce9225ef547e4521

    SHA512

    c1af0c54d7b583957e0c32e1dff9c935ae269a81385cbdac6af7624e0e98799defff63a9a7e7c7d8ca2ad58e5368a073c9e6675abba3f48cff5d8523968ce370

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.sdk.attributionTracking.xml

    Filesize

    133B

    MD5

    26797b667dbb0fdb224d39bd028671eb

    SHA1

    63c97e0457ce8299b662bc1a54a64a924d436621

    SHA256

    54d9021b50e09b8fff4b36b34ed387b97080d8b1e071083067515dc32a4cde5c

    SHA512

    ff1fa5bde9a9eba04bca06d41effb7d4ca86429bd8a7214bd5dda418309e4c10353856ca0fbf4664549b9934076d668ede68c6ce475cbd692ebc6950e282d65e

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    2KB

    MD5

    9b721d842ea342c63de73868f50cdcad

    SHA1

    32d456d0c72b6d2c9df4c636d756f16775eae6be

    SHA256

    a995507b3bf2a3c779b8b4820354e08bcc0bfb6bdcd3462721662cd5ba655d3f

    SHA512

    1e65b66fbd14c0e04f673b84d04cec362d83bed8c448d9d37ea5e38c75f9046b6701e1986f8525ae43284726ad2065c2d9d97dbbb2304bde93e8ae20878bd573

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    2KB

    MD5

    fa462dc19be789e4252de9bf0af7b371

    SHA1

    400c27fa0c4ac045c4677867a3c2691296837541

    SHA256

    4c1f55edf024e896d208d1441f91cc186b7d24665e5d8af0c7c2e41b73401f2c

    SHA512

    bb0493703028081a6cef1d897a2b5f5fe3394e880b0087fc25220ee312d9ebb6aaee698430b3a2b3223fdeedfd38e55dcba736527dc490fee8bc27cbd0a982ce

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.rovio.BadPiggiesHD_preferences.xml

    Filesize

    448B

    MD5

    751d2759a32118860eb2dfec74994590

    SHA1

    27f026ad7090e81f723d00358ef05c5daf258da5

    SHA256

    6d235a31f097440b0e55f1213ab78d03328af661e5686c6691916adcf8b663e4

    SHA512

    e3b13a51176cad5275e122363a11396908a0e072fe6d2f713a7f75e2a5e630a94903ed41261eaea6949b6bd1182549e892cf7acc73d870743598cc00ce1b3f73

  • /data/user/0/com.rovio.BadPiggiesHD/shared_prefs/test_key.xml

    Filesize

    113B

    MD5

    52a43ea38be5af3b937df596dad1b237

    SHA1

    1bbaca95bf8ae787404820677da9186ea7ff7c2d

    SHA256

    61a258ff09f95e0925cc752fc58e7269edf601f2386685ab24d0863f70f7bc03

    SHA512

    e4ca6e5bd1b66e8cd657a1773b4ca08c68324a89011998e1cf3afc6d43420e08a7808b4f15d79fb102ce1add3aaaf719c0051b6f2fe21d6730d8715a4e70d6b5