Analysis

  • max time kernel
    151s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    20/04/2024, 05:48

General

  • Target

    fc0f20db5f8098e42d845492fcf3fca4_JaffaCakes118.apk

  • Size

    4.9MB

  • MD5

    fc0f20db5f8098e42d845492fcf3fca4

  • SHA1

    380e9f9d17c1f13e66d367f4f8726200e2dee07c

  • SHA256

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19

  • SHA512

    d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1

  • SSDEEP

    98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Acquires the wake lock 2 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.kongregate.mobile.bitheroes.google.hack
    1⤵
    • Checks memory information
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    PID:5031
  • com.kongregate.mobile.bitheroes.google.hack:Metrica
    1⤵
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5076

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db

    Filesize

    52KB

    MD5

    5f95caa096ebd3fe93432163e3fd2d34

    SHA1

    48c9bba88699f9fbf625d27b189ab4395662ccc2

    SHA256

    c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3

    SHA512

    e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    8KB

    MD5

    d3340ddff468841c344f7663647147bb

    SHA1

    4db039a5e03ace8dba3e8ec86bb8ca172a4c4bcd

    SHA256

    433ee70370bf79bb1120da5d068d8fea878a44074fcefe1cf8b76f7c9860469c

    SHA512

    228857b848f8980b8bde13b40856d1efa570a27737ac6a5b9c0280752df6d20ee93126c5bbeef1ceeee9dc4874df253812a40cf44b709dc4ac5426c1b8f02c17

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    96ead8ba93e6ae7755b22c0e125605eb

    SHA1

    2cc55e424bbf26b2267d969a0a2c67e1408933a0

    SHA256

    c35c8e84b55c90589311d703b60594d3d392cd2bff5d3f2b2405e5d8f4ea213d

    SHA512

    eb2e8ee9a6f669de90801757f0fe9b5d5958135d43b0b02f3c80c7bd6973b472035abac2ec4419d8cacc6875ea9030ae0e5ea90242d762aa8e42043ff73d1452

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    44KB

    MD5

    f3e908c349df56b3e5cdd8e53fc02fe8

    SHA1

    7ba206e0cfeecc5f10c6e4dd7cbf581bb7e1bb18

    SHA256

    b588493203abae831f9c67ea881ab6f4c2240d85e4aa972c978f692b8b54069d

    SHA512

    cbef4c124936c1ae834ddfabbfe3295270aca28eac636384303f64047cfa31574a79c693fa69cbb391c18e3c3494f2fa7b9efdbaf64ddbff8af3a42019f1e2f4

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/files/Mint-lastsavedfile

    Filesize

    12KB

    MD5

    e378cd50c997d9047e9a0f51848fe7a4

    SHA1

    e23b2de6ee2c390a09c9e8d43aa39ee313295f19

    SHA256

    1375c266a7e5eb1ca50c9fea8007b40a4ad385b54c9c9acef1b974c08d523738

    SHA512

    f837443ddb757d883746044f981b1f20a746edd84e6a7887b6c65dd68244dd310c642f4718bbdda3fc087411efc0debc2c670213c39a60cde3f79732521704c2

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/files/MintSavedData-1-1713592107484.json

    Filesize

    8KB

    MD5

    a810bdd32775a145e4891466beb309ee

    SHA1

    9260cb4f90798c98a70f51e41c7eb710b7d3e2a4

    SHA256

    37cd6252475ea0dfab69a36f7409328c7fbe327ef3e3182e1eedc6f6e65a45f9

    SHA512

    6ab2422fa6c35a2dc6d4cf7d414864cd842784c416c1341f22fef7b9933a1532d78104908937562445064fe7d71ad48176d58c53516271f668d7274a78bb3beb

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb

    Filesize

    12KB

    MD5

    0f13cfca183eff6179c9f702bd56baca

    SHA1

    1e411a1a3bf3816f776cf1f2387c3fbf68e1c66a

    SHA256

    1789484c5526cd03250e7dbd335bb7bfc702e6b39204ed8140b58a7a12e26a33

    SHA512

    0a771b1ca7d3341e341fdfef0c053bbe58b8715df352ed781ce7f1ea268e1f1b10dea98d7da7da06833bcade60d73ea52519a0ba60e4abaceb497cb5c5000621

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-journal

    Filesize

    116KB

    MD5

    8f964e312c4c63762bb973b625f74897

    SHA1

    4d3f5bf4c26946cb9f18b157ebb2c1edb2220fb7

    SHA256

    9890c453ce5521fcbcc1ff251891365bdef473dbc93cf8cc90b7c4d360c14839

    SHA512

    575c958c8b04b3f704afb31d0896ab5d5e53955feec2af4fb9a24f0e5bd18a2c4d6cf3cc44fa36cce4373c7b95384da501483cb5435f2736c2e4640127af6a37

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    5d4d196d1bb51e8995c169ad1d594a9d

    SHA1

    984652f9c36644766463bb1b988ebfdc67dd78dd

    SHA256

    a70a565881fb886eaf93622f6954bd57f793bfa3ec11a5ddfe329bbd551f0302

    SHA512

    93a3c0c2149e1a76ae7ea7c4398c022f935528c0e84536aa42851c857beac463989d20411069f75038389cad1bca35a21c35496a011a65498eace19155b1571b

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    baf2694bc68071ca1074864b18faa683

    SHA1

    a71e92160ddcaf245160f526991f9d2cedd5e495

    SHA256

    6c5520484d1e72c410665ed939ac97d3b9de0facfc40abdf0bfe00f1473f18b8

    SHA512

    e380c2077b4f4721178b657afd8b210c7e6ada7d2111135cb1d53c1efc13ef1f27eb2adf275182f14cd6a447925fbceb34accf186f8c6cb8e6e74372f64ff671

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    30c761ca4f43ba4e2080a3871b920e0c

    SHA1

    8e658a6d1be23a579403a288f0b636ae2e8ddb2b

    SHA256

    4cfb67f7d87d8894f201b813b3b7dcbad98519771bcd4693d939a502d140e935

    SHA512

    285e1852ba513cd91613d80d5362a3ffbcc09d0f92e53b2c85441fe8a595871a30b450428ef27bb484063831a389227d29c531b473e24085e04ab8979db4dfa1

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    253KB

    MD5

    1f0b1c5f6e0c1604aa3412d83567e3e5

    SHA1

    bb39a004fb6855afe8e579c44e4f131154df885e

    SHA256

    77daab22176a3091003f86358461f605e98bf304274720c1bc8297c54ed18a60

    SHA512

    6652f08caaf2565f6c866fdcc367c51161d45df32eaef411e8c0a4b873601e625509e2c3627948d9c26c294e7e830d0a330c848dbbf2cf8bb226ee658374693d

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    8fdb940be604055df97d62269f633fd1

    SHA1

    dc3fc95bc936abb227bf2463d0136a7128d7d21e

    SHA256

    8bea9a5d2f60278a7b931468d07623469de2d46df52aed42a6b09c0357bb6f15

    SHA512

    35a5f38cd89f445b6b0cf35861a01c19062d50822c44f406b9017cd4610f0c00c7ece8b9c94808080802597e11a996643596cc622ac7c429e568bee1b30f3fb9

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/credentials.dat

    Filesize

    226B

    MD5

    03d5af1ca3f7e138a5c943b51af23eb7

    SHA1

    b27167eb86c5d19f2163f52c1bf8727f8b5a9da9

    SHA256

    104957a241d580845ce38f29006eeb4c21bbbf030be52f136d8d99dae8524332

    SHA512

    3180bfd28fecc993f4bdac5bbb78c897d9d6d99a58f9985f651a3ce7250a04a1362707dbc19e851f080af4ceb47c715aded8572875aa88714747e879e0f27a62

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    e4c87b624d2028e16e47e79e21aeb254

    SHA1

    5eafccf972c376ea466ff6a7013397ed38588a98

    SHA256

    c9f754226a8cc98da68dbb3565c7eb2ddaa1b01f89bddf0a83056deadc5143f2

    SHA512

    d07afe541babe99623c57f09f8c5b2a579f876e6b64d1b7d9b52b71f878668eeecf3feef92a6b1de1d790ee69f39cce38b93b26493e990f59ac7f806ef413f67

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    12KB

    MD5

    94837c589fe4187cd7c0d672bb638a9d

    SHA1

    78628125117e8b2ee29fd433bcfd537e4007eb6c

    SHA256

    3d405e72d09621f582bbc68a11eca6ac979ddbec3ab5609d262d4f6f466bbb82

    SHA512

    1dd5901b0caae6d506bd3ed675b3c81353f7396dfe8d8e3caaa83886bda5e008a16807cc569072646d75682558622341d6ba90f94e9c072d8b628d4a35951d6c

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    277KB

    MD5

    668de2cd3fa8baf0d9f45abd68d4c905

    SHA1

    c6d6482a00a1c2a9cd7c2e6feeda85843a64e76a

    SHA256

    472ce87b69309cecf62fcd2fc28655f65e45ab46792e1feda58efc11ae7064a6

    SHA512

    9d298af3ad55403daf2c302ee15d623a7f15c37d9ab9818a8c3906e9579ebab53dc52560ba1174a365f6fcb616c7bec10728935d1b4c8bd69653117ef06b900d

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180

    Filesize

    36KB

    MD5

    29609bf4307956e68c6e6c21e2510f34

    SHA1

    f4bb2937f7a8377235378d6780691d3681800ecb

    SHA256

    9a9810a4c20e4fd2c52757fba93fc490982f7e201a9357f4b8e26f61cedd8510

    SHA512

    327ad83654d985c2c1d35a0d4d3aa33b2ad73a9cbc9c06c687c0e355945cb89c240a171bcab2aa57c3ded5f145f09e5a12aae740d6e0c80b0a922a9f6a60bbd4

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    d58bde0022c00e37f1ebdcced0454ba2

    SHA1

    3ea913c209deaf007090c7c27a917135b8aba357

    SHA256

    dd53946e5e80100756988995f35dec4146fd499d9fae0bd847aaa7de25834c23

    SHA512

    5adf9990cd615304c2e45634fbc8c4ff534b29cc1dc26de3e010619c60bcab7bc9b61bb8bc8b90e97c9e3303ccfc881b12371f74779f5985668e81311cb80dac

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    5b892741051f52df1347e43fb9903a19

    SHA1

    07ee04418c648d8fd16107e30b1d769dbb9bd088

    SHA256

    9b6356265ca95bed6afeaa6d828f3ff1568ed8844542c0388aca321a5ad66bb5

    SHA512

    06a5bd6a41f8b4429717e742342b973c3330e202811ecdf73b1d64b7b3ea0ea77b0951ca1801c217277191bfb9900bf1d613434f9f083b9f05a1ed658994919d

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    6c17c6fb8f41773233fc4b2eda41041b

    SHA1

    90ed416a7814ea32e7c2b0743a658d3180c093a4

    SHA256

    aefa43c63f5b31fdebdb9f4f2ac7e25cdd7d1461cf900a55518166ce223969ae

    SHA512

    cbf298b7d8cea8bc9236b6d722a209f70971666445c44d7f3b5179b5fae485007d364ab83c31135043eca7f5c4a7b57fae6fd1b20527b8617b156ae7df923704

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    21702342a9f3e9bd72f117e97b000b71

    SHA1

    17843fd8365be1373f048e68d05456903c12c06d

    SHA256

    7c521d60e286c646d484711236d472b53ed88d5adbeec44c3b819569fa9d7557

    SHA512

    48a271a2164407a03bb28abb3b47a7c959da753e31a6dfe5123944d38bb9fd986e59b4326b42272d84fff190628cb576d54cd28affc0ba1bad1945919eb00e53

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    64ba271246d2d64ed676414f62080370

    SHA1

    faa85b022ab4f908879333d8b2ed9908a780b75b

    SHA256

    f2c8a51dd30df01a49fbfe1846539de6a335701b578f2e9c36d2eb3c92968bab

    SHA512

    d1f5d0a01021e93de7d827048698399f845d341df00b20ac434b4ae265f850ff46b3415c445fc5b6deb04f905e202c874b5db6dca1f68974db7cd13094c151d3

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    1b1d8c8e72b605a4da9946e80f6d219a

    SHA1

    680afb10a9a8580af044337966ddbc16eba372ac

    SHA256

    5ef5e7a03be9bd3c1a3b198e83a9f88bf41999714b39fd9792cc23df2ac83024

    SHA512

    0cfff8e09a92221ffff4af37e15a700674bedd14efd0d10196b5fd847857c80cedd775a5f1eea5de35422f93fe56aafb5e98e337198dae0e800180d78e07b865

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    5405f7f9bb07e89faf6addd0d91a45c3

    SHA1

    4c150c87175d2ca0eac152194d169c63e7898cf3

    SHA256

    e86ba3041e9c1a5d545d468dbe6df3dafad7095e4b7c500b39d0dad281cfffdd

    SHA512

    33338c73eb33584b38659737f97148c205d41a96f98c430a2456484ae46a9e62e6a416415c3e23fe35e815a74791e5a50012bb7650e8b932e35de804693a4200

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    48KB

    MD5

    7abbf2ce64773bbe347e226454327459

    SHA1

    764a2c749345f875e4403f7e87e8d45ee2535fa4

    SHA256

    9fbe301ce393513fbc59da8db97591a8b7e41d9a65eea48f7e034fc67062fed6

    SHA512

    3c4a1104e678ae4b97d20fbf7b6437bdfe7f860c13425692635e0f3a47f57859f3c3ac166f55c44c20b9ad5dd8cfcac1621f48c0c67216ed4e2c057aa39e09f9

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    a0a548793a510f9caed081689f935eeb

    SHA1

    2d1aad0213b2b86bfe52dd2485741fb00eb02f3a

    SHA256

    4564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5

    SHA512

    624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    ccddafa5f718bd9de9ee9379da4422b5

    SHA1

    a902478b084440ed83ea42482b950c69a33d82eb

    SHA256

    2aaa20efba2e9306e0f9c59658fa9a3d9c5c6849903f78435badf577bb5f258c

    SHA512

    d79f37a1e9ab14c117677db9a4406b1c528249ff4721d178f2f61b77c3bca506d36a3e4f31ae631b2780e48e78eebb6f7299094b15e167c7157bd1c49b138053

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    1d4e7b20f6f952f399be035995601b5e

    SHA1

    53f1f27e2ad467f56e9527a4c2cc60f78c9544e7

    SHA256

    3c510f272afbfe33681b1cb0642cfe7d65bcfbe785a0aaf7229ece9a001e479c

    SHA512

    98fd1f694a6dd8d961c98b4f56e4070b0f21e01db3a803fddee0198018b0c6fcb1849b28d4d685f3642567ae51f95a2e288eda5e4f9720ed5d14a5803df70910

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    49eec469c86e973f3b709162fb982a5c

    SHA1

    8e512e163ad0291f71274e8ec92e45c789e467d5

    SHA256

    84fa3d078ab955acf9df28f05a14b0b0b24e2e45ae30e344b19410d7323e93c9

    SHA512

    d616da13004c58689ba71284956e3203464f9cd46f6de171792c80013ade8e5964dab187d6145c315b25d8d96288c09436b3a8231a4415e6165999737c5d8dc9

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    b7e9b98dc289a00b8e866af29e94616d

    SHA1

    d219073853f5f24e04649afc94c7b7fea36c26cf

    SHA256

    2abc6c1991fc66552e0be82f80c28b3142b04405c556fd8edad721357b740e09

    SHA512

    c3a69a8aa0ad1c167ab0c8abf3eac05129818b08e74ff51e88f6da57465c521d713541661ae88e901e7117f4057373dd608da10a087eb32fa491b9f13f41ff17

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    b63ca35b1eea85fb42ade4efa12d0a79

    SHA1

    e3bacf895c68db185e33e16b9a77149ae455269e

    SHA256

    1f9cd44e3b5a1693ace799a14fc187ff41e356fae1f1ead32cc04b75b7eb1313

    SHA512

    19bab711486f90fd6a169fd744f85dac79878180dba8049320e18c5cf4c093ffd7f0e1fed8cd12e5500afc28d137ec50d860f719568a5cb70278d0360408bff0

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    20KB

    MD5

    b33b13a3c79de411a6f64fd20490aaa7

    SHA1

    f1e0f35df28a10bc9ccd094ed821c50d0de49799

    SHA256

    241d509f6874e4f2840983c03cae9d821b00b3c91564c5ad8fcac34d0effdabd

    SHA512

    f73a105f6be48a463d0b5812abdab7a724741d9eb0d8b62c3003cc7c7b25ce1abbaa75270c2979e67a3f39446d560b556dc3debacdec473968b148027f4b8357

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    1c74f2fad2cbf0fbb4b1c5f2fd5388ad

    SHA1

    19848ff913462077ef08b5ee91a000e2dc0c0556

    SHA256

    d7062df926475ef4bbab59c439984276410e8036dea6c2234aec421dbcd1f370

    SHA512

    cf9303802d40905ec6b77336ec6bf4439025893ef912c8ac942b07221ec02c1d0b6cdada425bbb1e83b87d18a18e6653eb146b43ae57ac1942213a933ea8c319