Analysis
-
max time kernel
3667478s -
max time network
111s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
04/12/2022, 01:43
Static task
static1
Behavioral task
behavioral1
Sample
com-mod-bad-piggies-hd-mod-v2-4-3297-unlockeda-lot-of-money-3297.apk
Resource
android-x86-arm-20220823-en
General
-
Target
com-mod-bad-piggies-hd-mod-v2-4-3297-unlockeda-lot-of-money-3297.apk
-
Size
77.5MB
-
MD5
2e68857e396e3331782f54ffe6b0861e
-
SHA1
3aec9b6abad31bafaa51a3fbf4db1ecf92e6bcae
-
SHA256
78f1623ae350a9b989234baf205546680781409994796d29c7052620f76a519a
-
SHA512
70cfd7ef21d6c7fffe3bcc6778965fad67801d80e0fec1ce52f7e5b0b83dbaaac6a97e11958d5f03914ce65592d634f7b92a83e83b1f0234b7df5a40d66bd93f
-
SSDEEP
1572864:FD9698j71m7SA5HjucZLXpZjyE4pYcLNnCPS3uqrN8My/VYrNAQ6j1Y3:FZ6Ovg7S0BRZ+dISzr+vQ6G
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex 4115 com.rovio.BadPiggiesHD /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex 4206 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex --output-vdex-fd=92 --oat-fd=96 --oat-location=/data/user/0/com.rovio.BadPiggiesHD/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex 4115 com.rovio.BadPiggiesHD -
Reads information about phone network operator.
Processes
-
com.rovio.BadPiggiesHD1⤵
- Loads dropped Dex/Jar
PID:4115 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rovio.BadPiggiesHD/files/audience_network.dex --output-vdex-fd=92 --oat-fd=96 --oat-location=/data/user/0/com.rovio.BadPiggiesHD/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4206
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD52ea33ce9b382be2be58abd5d410a64d4
SHA1c2ef0ec4783421699b74b0df2a9a4234fe5cb7ab
SHA256777ea26740f66da6d74a5dd04cd4d3f4b46dd3061534a8bd3a8aab396dfa9594
SHA5120722bc4b0cffa896ead97780b2c1ae61a7580037313bf5397e1e5ad19091797ea383cf57a76980a21810557f5a38cb68aed2e40a3f74563057d18b072f7bfb10
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
36KB
MD53bd7e2f7a0190ee02826b0324529bd4e
SHA19da4901a67bc4d9b1e5f3b02bf37f02ca7ba9adb
SHA25616746819ef826f00d8abc1da87fc3d31d3d603aae157928fef6281a1641fadad
SHA5123f3ac4bf458f25f9c945cdcac90fdc068a5cb3fc2cf123bd67c4d8fa7e6bc03805114fe2cb2b6d8397d258c3cb2e7c3dae26ba770a9888a2f082385d4fab300c
-
Filesize
3.2MB
MD542a776716f329899669f6d761d626003
SHA17c8a66fddabe92a33367f14c29f13955149223c1
SHA2567aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
SHA512bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1
-
Filesize
3.2MB
MD542a776716f329899669f6d761d626003
SHA17c8a66fddabe92a33367f14c29f13955149223c1
SHA2567aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
SHA512bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1
-
Filesize
3.2MB
MD555258aa35ea66319a0b9e241cf45e55e
SHA1fe23a9a8cf0df7f455f8c16f5509a5552b0504f9
SHA256f655c0adebf1ea986e596d3399ab2f587a21770c9daeba36ff566c220e34f5dc
SHA512d0fc6294e0cce6a4aa5074a8360c97ff05148e641f5851c65b27d4ab398d26f9b6dbc93012fe47900e5dc3f7d586c6104f8b4adc885570f30ffc07fb2486a29f
-
Filesize
3.2MB
MD542a776716f329899669f6d761d626003
SHA17c8a66fddabe92a33367f14c29f13955149223c1
SHA2567aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
SHA512bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5410e32099339864f6160742c25ea431c
SHA18ccfec50387ce249b61f28b4f3c379179ea1968b
SHA2561a3862c985d5cac6d86aec4bfaff2dd69c02d3899f977c5ac8611443a115132f
SHA51258d00f011808f91e995b0d20325dd3562b2d92b5c9fd3d06380abe97ddff1ae4428b8bd8b94fd4f509e8fb50ef1ae6d26cc9200237525c6d420c80ab38517514
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
108KB
MD5034ad7d748015132a3db43f3b8995d53
SHA1a8536fc6dfa772ec66260c2e7da8260bc1cf66f1
SHA256e2a8b6ba1be5c77c0f78fb76070a5813bdc3a389a09f0e53cc1d7c9f32951d64
SHA512a643e99a8f030d2a6e6684038729668acb35d7f39a55b7895a7cc3fc088ec87bf74d3602f81fda276ddae4296e2286a6f41d56834fa5006fbe624896191543ca
-
Filesize
161B
MD5fbf7fc75fc428ee054daa2fda633bac8
SHA129c60f62666f46d670f4f6bae2bf3fa012d07269
SHA256753e9ec8a8f0c87ebeb11b9acc2b3537805c0925db724e64f0b10b8bc411498d
SHA5124f02c48f8c59cbd5ae9f8ce3b0958a87d4dfcef4c17abdb9dc22212e3249dd2bcf98af1ea3eaf46fdee6be4d0904f44ff721b5c9a679228ecfc0a11a3bc1f988
-
Filesize
236B
MD598cdd8fbc9f548acf3febbf1f9f0f429
SHA110708fa7ca793daebcc0cfc78ee55dccbae7d5ce
SHA2568390e842cf0bf634027c83d4634e414e9884f53c3e434232b340c6be27725ad4
SHA512664c43f008546882a539672082bcba377ac1fea8c3ab170a54f03c0ce504301ecc57402758efd67b1c6969f24855a5688d15361b73670318c0cf3280b3bce3ce
-
Filesize
146B
MD56b205e55f7281e6ac40360a437b43449
SHA10a37503393c3f5072fe2b87c56958b44cd2d7c70
SHA25613f5abedb1fcddde5023b2485ce9e1bbeea13f02e0c98fcc361251a27daca37d
SHA5127a0293c495439a4ca5e51105d98839470efd00a0223877ecf739685c3e207f8060234e4eadc06d89bd9d3f2bd8b0b28d0e4837347e2e37266367d91d2abd9f77
-
Filesize
214B
MD5c98a59f1ebee4fdc297e0bb6bc8fd50b
SHA1f3b64be1bc9685157e35b2a8771b771abc1c64ab
SHA2561d94d5e1300f425b26cad5c4eb407610fe98472d02f7c5b6b3cfa02ad1b4d9c5
SHA512efe4915d6a3613b6c5cdc4bd029636eb1a26cf8715d78b31dd9a0963f1a0cfe1f633fe8d6825e682c17fd39f132068b5d1d741924c10458d906da30eed082f7c
-
Filesize
281B
MD5427e837f18a945b69eec8e7ee31baef6
SHA11161232a6da53556e91479cd95827b0e866641e4
SHA2561d577334e3ca04e3b76d87dd59aebce1fc5f3f8fd1d662914fee2f1242e440ec
SHA512cc128998859372c4f3d19c3655ae97bc57f9dffa3452a0e4488706ee741db4710c5740520caef1f19a4d15782ff0dc7be09e12ec7fe0b1bc606f66ee949296f7
-
Filesize
154B
MD5b7bbb9e63deee5f8c00d71cc81fe0f0d
SHA1989615662d75356b34db8649b70ee3b03a2ec215
SHA256b346f329f863eeb7fecd3e1e01e9c2da525eb8b6d22a4bb4f2a3f3c0d7d0dd59
SHA51239d284148b3441e277d5bff8c72c115ed5993b0e72782959bd8c9d76f7570ab414c62a7311804e53bb7517cf8f0131c9eba0bf31d0fb8a0d9a552dfb4746b455
-
Filesize
1KB
MD58afd1fab2b82e02824485c2533f2d746
SHA16d7d0be96cbf846d3e373f5a04e68c3a42a4032f
SHA256c2533aef486d2b0656eaabf03cd891fd7aa062720ef81680c01386a6d6b8d10a
SHA5128c82bd09c72c1dcb84c7d8ef2bf898c480e25644f7501f668216b5bc56046e654b498b5c9877a4da6b163e4d96cb20a8909ed4fd0cb0b51d2b49fde893ec716b
-
/data/user/0/com.rovio.BadPiggiesHD/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
Filesize3KB
MD552667209d4c56b62d48b0d6c79e010f2
SHA1026182cd129bef3369693e3ae96b5702ba08580a
SHA2568cfd6f253ab85a651f22282a0c3b82ce23ffc4344a039ee21eb65eceb8d88a61
SHA512ac3eb04392ca50000bbc56a9c555a5a302258e0ef83d6059b6f364ca1857f6fc32c925faebf59d87893ecf4aeb37d88e8da693dd58e2d0f232f78ef6e3eb741a
-
Filesize
1KB
MD5423b3116d65196093bae8bf7867c1418
SHA1d3074d7fca21b93649d70c1f126eb984d6c3c82d
SHA25665055113b41ca6735476de187715e86c71e20a112b84d95920f91c87dd8890da
SHA5124bda403de22cafaeab885a78371e3d85b6aba308c64fe816d7c628513f3c44af12ef42a15562eb25136cef43d1b8e7d2b82e50df89cc654c77fd2dbecb3f855d
-
Filesize
139B
MD534d145a1f9d7290f517f621b0e5635bd
SHA189108d6cae8d351c53efb5b70991fea2deaa8e64
SHA256777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e
SHA512ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb
-
Filesize
203B
MD542cf8a822b2acf0159a1a03b102cc560
SHA1a85fd96b3767ea3d5457c785169d17fccba80bf2
SHA25610f10ef9709f0b0d16df6bb7bb0f175666d6a4fe35e93f90dfbc482e4935f674
SHA512ca62a534035bed1b3bcf22d53c56f11d73af59bc88bd83cd61503e5268b9fc3f2062ea27e541aee51b7bccb8a10d5d41ed6fb6f57399d23f66c193e3d20bfd6f
-
Filesize
160B
MD5c0af82db5c3ad86238030a93b19ed682
SHA18b0744d34c95c2fa58ee2e4fa3d5bd77ae79075b
SHA25680ee699ed35f84c97a426f84d93e514cf8f055047081ea93ce9225ef547e4521
SHA512c1af0c54d7b583957e0c32e1dff9c935ae269a81385cbdac6af7624e0e98799defff63a9a7e7c7d8ca2ad58e5368a073c9e6675abba3f48cff5d8523968ce370
-
Filesize
133B
MD526797b667dbb0fdb224d39bd028671eb
SHA163c97e0457ce8299b662bc1a54a64a924d436621
SHA25654d9021b50e09b8fff4b36b34ed387b97080d8b1e071083067515dc32a4cde5c
SHA512ff1fa5bde9a9eba04bca06d41effb7d4ca86429bd8a7214bd5dda418309e4c10353856ca0fbf4664549b9934076d668ede68c6ce475cbd692ebc6950e282d65e
-
Filesize
2KB
MD59b721d842ea342c63de73868f50cdcad
SHA132d456d0c72b6d2c9df4c636d756f16775eae6be
SHA256a995507b3bf2a3c779b8b4820354e08bcc0bfb6bdcd3462721662cd5ba655d3f
SHA5121e65b66fbd14c0e04f673b84d04cec362d83bed8c448d9d37ea5e38c75f9046b6701e1986f8525ae43284726ad2065c2d9d97dbbb2304bde93e8ae20878bd573
-
Filesize
2KB
MD5fa462dc19be789e4252de9bf0af7b371
SHA1400c27fa0c4ac045c4677867a3c2691296837541
SHA2564c1f55edf024e896d208d1441f91cc186b7d24665e5d8af0c7c2e41b73401f2c
SHA512bb0493703028081a6cef1d897a2b5f5fe3394e880b0087fc25220ee312d9ebb6aaee698430b3a2b3223fdeedfd38e55dcba736527dc490fee8bc27cbd0a982ce
-
Filesize
448B
MD5751d2759a32118860eb2dfec74994590
SHA127f026ad7090e81f723d00358ef05c5daf258da5
SHA2566d235a31f097440b0e55f1213ab78d03328af661e5686c6691916adcf8b663e4
SHA512e3b13a51176cad5275e122363a11396908a0e072fe6d2f713a7f75e2a5e630a94903ed41261eaea6949b6bd1182549e892cf7acc73d870743598cc00ce1b3f73
-
Filesize
113B
MD552a43ea38be5af3b937df596dad1b237
SHA11bbaca95bf8ae787404820677da9186ea7ff7c2d
SHA25661a258ff09f95e0925cc752fc58e7269edf601f2386685ab24d0863f70f7bc03
SHA512e4ca6e5bd1b66e8cd657a1773b4ca08c68324a89011998e1cf3afc6d43420e08a7808b4f15d79fb102ce1add3aaaf719c0051b6f2fe21d6730d8715a4e70d6b5