Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
153s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
03/09/2024, 06:47
Behavioral task
behavioral1
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Behavioral task
behavioral3
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /system/bin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack /system/bin/su com.kongregate.mobile.bitheroes.google.hack /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4812
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4856
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
8KB
MD5c4597e40b0812d97027c21e4f35c3b72
SHA1e1389dbe1afb5987bf392537d3de260f23cca78a
SHA25676655f4feb1d878b7e534113dee15819967d8c6ac654f74dd58aaf7b09316408
SHA512f17f489b1d490fbf1cab68ee0e05e78142f92cc9b1fd44bb5f80d6f3c31eba4ef36c474a848d6bf6a67460cf1909ce34c869aefc0f403e8230cd005f51c4fbfa
-
Filesize
12KB
MD5ec9759828c204b125f0b5b71a126b32e
SHA1b53fd0b3b16e95bc165b706e5502906d0f3de5c8
SHA256525f5d8355573820b9df79235f998ab1338033fb67a7f1946fbb50c89be377c8
SHA512207da98f3d7e91ee8838e7351053856604b23027270e5c7a00ee98e4f82906d47c0be7a4670baf55a4d53320a5e9487f982ca1f67fdcd0a80b60e62623556227
-
Filesize
512B
MD5155fc4ea89d2965e689e73967e052145
SHA11a343aef998118c2b6aa6e373dce831911170a07
SHA25631b1d0b200ebbd6b7b58082262b68b0be29b53c00fd30d336a6299269b19abf1
SHA512b58ae6c4672230f5105cf33e32558c84b00a6d257f2859ec96dc569d62baa9b6790c96b2300599f19253990c05f2ab76c7f7926ea6905baa174f97b9e2ca112e
-
Filesize
512B
MD5e5e70ecd50bd41487a17e9471393b9a3
SHA135050227d145bee4e0a1d3f296ecff8a4f98fff6
SHA256d7575af5eb2ed92f587b5a2e5ba74ab8f0543d4f9c80c3b20f0bc93131a77f05
SHA512b4ebdbb8ce9c4fa6be39089753b02ddee355e813a207b69d6e1b3fb33a9036f8daacf1491265e71acc3286bd6317f8bdce4b16ee26f845d010bb316fcc133458
-
Filesize
20KB
MD5c39280292d6e8a69d4adb3a412382b2c
SHA138a5defb84a79638696d581c4d8a289449c85342
SHA2568d3c4df09d4a981354b1378c8ca5ad5cf63cef448f41940170f312aa2345277c
SHA51226abb091828fb2f502b1a90573ef02cd9cc5d21fd1ef95c241a83515b9f51ae0a4411e9e31e127f165e215e81e5f2a0111db3732b10fa367a02e4f1c6016f39b
-
Filesize
116KB
MD5480b143373b656e66f2167851bfde21e
SHA1df219fb50d27bc568fe292a3e8b20c923c718a06
SHA256e3e15cba17feeb61794c7e6dde6656008a73e9e7502c6c26f57ddc80de414c66
SHA512d272112117421af570626ff35366969539bd4306a5f8eeb58b469fb35bca764dfc9fe7acfce4f51d7aea30e6537bba39a3562a2988cf5be3291a543c8b2ebbf7
-
Filesize
12KB
MD504c2ef9695d5d92da10bb50156253a51
SHA191428dbc96efdf33910b3c85a73c037d9129e569
SHA25604a91db46b09f794c233108508243aa3e31a4146c9336548f860308c463d66c6
SHA512afb20a942bd9e104dd1f7561ebfddabc5fdd317ab3d6c467ba6892ecc628b1823419670cbefd6da5909ed535f3164849bb2030856fe49cf81d8091c5f9049860
-
Filesize
44KB
MD5427ef530082a4fb76b4cf09c7956bc73
SHA1ff37660f5306724f294ff545f401d549f33ea1aa
SHA256b2839a2fd859197a367ed6ad46830cfcf1d6adb69710df5b12d07e588d2f9ca9
SHA51283f2a8839bf4cd83f1cc4af39834ae612f84b21f0d79925e036eebf08864d63741f0791c26dfea7cfdfc7dc6eaf6883e29c47bb42755c6724b7a0240ea33b81f
-
Filesize
16KB
MD55c614bcbf8123e1f5e830d95fcbb5bf9
SHA103c89b77fc482244e93ae22027bcc3e9e3b0fd16
SHA25661676fef87f43659f31ac87dcd7797dd4bf05a313c1572adc022caa00fecb47d
SHA512a949bbfae91cd671b0eaa82e261eaf3368b2c34937f9e97b3a4e0f201a327bc3301ad900b110cdb9d81d071da46404dc399137fa56d43577d509293a194be384
-
Filesize
108KB
MD56084b765efcb4ef66a495ec02ff17c3d
SHA1c155432078d71c9fca9780562d6c5e5db58b519e
SHA2566197c3848d1a19f90a974d243aeba79dbe9ebb6a61edea3c02eb517b488364b3
SHA5120ab480efee9ee1a6388d16ebd5d84dbbf5dec8cf0a8a9c87319f10c389e9b47c3179f8137542f824c4b2906e78fffd6aca53ce00f65bea3b8ae943dec35b00bd
-
Filesize
253KB
MD5149fa107867c958964074a85090158fe
SHA195499f85c455b54638208b398856caeed99f6e51
SHA256c14b0de3aa0ca1fb51d529109efe26de62ce3092e6b9c34ecc6c3b9117aea23e
SHA512fca9afcf1726ffcd109cf1fb8df4f9d711575c0fe9d0202921c40fdacd760940e3a0e53c0ee3982f5500f3536c22595d0243c658543e153ada72ff4ae7dde3e7
-
Filesize
12KB
MD5c0d344671e3ea9ad05617cfe3d7156ee
SHA19246952f0a565c2e416d86e88792bc3930841d15
SHA2561de99db8e480a93264896f08a0b53057312440edbebeaf13fdb1264c33373911
SHA512e8ed9c8daf304b68be09053377ca555c350ffba9ea8673ff830400cd695405963980536df2fde095a4514916fe37e9cd1d16004c062386d21319cc9262ff50fb
-
Filesize
227B
MD5df234a718db4c73783c08f2da0c9f5da
SHA11be4ba57a5d6bd9b41cb564d1d20e4b30679aea0
SHA256ab05cb83ebe57f5c135eb30454367d801f50228d9175f9b77b14d8f880a5495a
SHA512c0dcdfc0b1efbaf7f40e1ba73ebd009a9f1910f130328e988c924b90a60d8203e23ede3ce09631bb698beefd21598d8e12390e6517a2409ebeae281879b51d9a
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5828eec8102fe44504bd26b8dee4ca66e
SHA111313bfde52d79ef9a270cc7720c8ed911efe081
SHA25638c65cd085f83361c7c9202e439e3aabda708fc34fb0903005837c74df1566ab
SHA512721d908925d6aeeb84179147f5ea7cc0c0d2ebd22abeaa77bbcbcbd0d2997021639692a23950f12d10fd3bce76e1dc85b617cad4611f6b6b463c54c86bf7cbe3
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5479d2c4c76dc25ea82ba6860ff139bd3
SHA16c8b75d53f4e7f06a438f9ad349ae53b4a67a988
SHA2569f5b236c3b091c435ea2aa037f38c0751c30b196c5bf5886ebdccacabf66af7f
SHA5121cf27e74a81cc462b8ad5cfc1e991b83851d679df411044c666566306423e61178fbb85908a6a443a49e05ebbadfd6ce16ad9a893297e3185e10781c8ecc75bf
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5c75e25d2f40a453a2442ab9506a97fa0
SHA1748290cbbedb2796b24c58720aa0a4cfe18fafd3
SHA2566772d592f0220b434d3b6fb5cd7c038cdf8eb0b1e1a28d4196977a64f9167edf
SHA512bd0acc716abd076f33b729fd2723905a40a9181b31233f87d5fcd23e3c7d396deff393a91ea667edbf031a53971ddf0c93e2d2459a9fc6dbdd2a21a9b7db7f7a
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD5c9d868e9656fe388060b817c484259a3
SHA19c0995dea34d9b82e78be9246acb0d292bb36f3b
SHA25601eaaf56d1036d21e8a0fb229dceecfae28a25310bb03f650a5f71781c168eea
SHA512c2fad3bd7da23dc1caf496f52a7fd91bebfafaf3e53d2d239388c457e9ac85c2a7ba85b980bc2be23aa8dba1225b488a5169fbb97c3eabb24962e48f1868c9f2
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize301KB
MD59ac6c357b3fbfcd60c79281635895c6b
SHA18b8a54f24ff718cdc2171d3b9e3cc3bf58e28898
SHA256901f86ca2b8f5ab113b5216cc8f00bcd0aafd6c287296c87a44f342be2f14c5c
SHA512602e3d10f65cfafbd537af5012180b7733761a4b33cf27ea9899691ff55144d927045e7c165d41fc01bb9a5bf1e9adce4566d91f89a365f147e8212fa5981be0
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5155476b59bb5a1f063cb39988219a87b
SHA1ef04afbff96a3bce5e2c58c5f4319a3da0cea869
SHA25659ee0575f13e758e2f2d23fd56aba10c4828884a84fb2789d0ee659986c721ac
SHA512f9c270069ac3f22ca9cc3db9dade1a87b5f9ce8f96370e352b46f52b6fee46273fdd3d6f2da9c2618ba0aeac0e6c172cbbd91e83542c969f070998885055ed40
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5443ca143f7e184ec968f3cdc1d9cc5a4
SHA1d45384de4c422fcf2a394b2b0c76d38a5cf5f5e4
SHA256cc277496c180af6b02afe5a5ad922c7c71de21fbc161b101979b0eb58961420a
SHA512b8448f99e17c9724eec7dba1384a14efcb83f4cc4c45086868c1d3adebb64322dc10afac71bb97d463b68d6e4c8bb3d9ae19e24e41b56195a3aed34d8378c536
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5f89bfc4731cc5d4fb895fe578a77ebdf
SHA13b2baa896c05fff6441cc9466e2373927817a7f3
SHA256e98b8fcab96875aa5321b1f78c874b95f06a23d11a87dd9cb32a19ac1e0ca819
SHA51297e5f210fcf91e6b339d028648bcdcef3867d118007eea6feda6bf90c27a4d3fa048657b5a42055984cf51c21d6e6861608de7fc6942c6834c0b06c2aab8c739
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD50a2806aba3f059692dff571be337ed99
SHA187654b4c1456cecc2c1ea5b298a6ae25fe853429
SHA25600aa8b841fc8f1cd8c6e5363fd0ec50bf85a4a2717adac564ff3cbe7a494570d
SHA51263afb0618999ec0f916fe906730d3d61b9268a8418109d4a15fe8e6e0f49579b61504dbef1312a3485b5d8b6b2f0719466b2abca97f68d9cc8ae258907520451
-
Filesize
20KB
MD5e73a06f5d3747883e66fd41e403602cb
SHA1a7921feaf338d6210b37f7d99b2e320e468b77c8
SHA25611e476ddfc5350073bb3fdc3084153464a87244e123177981b45318b2c0fdc48
SHA512cdc07de6bd5b8b658c77e6c12a6078ba2b6e2aa0ff1b45bd227bd5de8617c65c20c689ba5216258202c85fddf85025e04674f31261a4d6661bff59887e6b4aec
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD54af98613a27a70beb5883cd65a228373
SHA180bfe9e0555300c1f7d45c02169136372e0b4ba3
SHA256df1ae0f9fc37820b735474aadc5f526d846e24106af374ce120918bc3ef804d3
SHA512c580a59d3d2bee2c16847e7ead02f4454c4b33a627a3714065f69697cf23d7710c84c479803fd0ae62ef76d23e019c8ac889c7b04cdf0a8372d42d766caecfa4
-
Filesize
44KB
MD5485f6a82d853fbc2026c2f0cb03e32aa
SHA1c253c9a4ea5ce6023916a54bfc5f8877ed39e13c
SHA256e746fc2890067351f85b3f4592190adf3ff6ba5f1201967718471921ecee45f1
SHA512f26753ed5e6fa1c6ba73d8d38dde8baa50ab0451fd1539573fffada1d5e464d9fb1636c3d5fd09bc52ce7da83df71adfa26acf9a153e89f8cbf4738bed4b9152
-
Filesize
12KB
MD52940a1a192c92e7ab8480b5bc301cf95
SHA15c8807e6c22ac024b535370b4401c8ce9a5ab9ae
SHA256c9fde4f720cf3285865b315098651aa0a36877e022bf4543c9830b339bc5edc4
SHA512f1d744f3b0ac6b11d2e14bed82c80d6fd55d3e1cf0215f97c99c16fa12fe120b1cd86c7a23d83a4a6f9a889267668a92c6bc54f43ed45416caee0e0b968f8722
-
Filesize
512B
MD5fbaef7166a247f2d1a95351d700bfdcf
SHA14a2ec95ef8b5a0df7f9891c854f3ee9e3e6da7df
SHA2564246d6b0df361a4e09ea02460b443866498422d53ea3c75dfe623348a9700e68
SHA512dcd3e99ecbf86965475d38a484bd3ce05a26063a16f8ad373275cab5e3d1b74a336e451688255a0e2d2b6d1330b403119841756cf27b77978bd07d586d4dc050
-
Filesize
12KB
MD52bc52120094484c1c27426806e34ba09
SHA1a972c0c3765beb33b011e4de645ef1ae310a6df9
SHA256fa72a2f85375134aa90686fde8888a8d9749d6627ca395df9f859e09d0bc10ce
SHA5123b96b6523c05b4300b9c2dd2cc8985f387a73355a536be94d0d241803b17c721834abe9e80cf12f06ded5b0c3705a0c30ba09885649f61c3cc3ed04966140e57
-
Filesize
12KB
MD5a311ef302b89b1cae193ed3c981b432c
SHA13e7a130f646174ffb9aa5cb83b5c0dd8d463a55b
SHA256b55820382b98c1a63a7acfe736d1a5879493afa5b203d31454aad55d6a61355c
SHA5123841970ce6341fe26a856400adb3d020b4eb84f4e948f251a532472c7785bd8c3350f51c948e10cf94ca233e5079a4734c4c21979af11379084907c6201bd9ee
-
Filesize
20KB
MD50d0491228f0733d9393290cdabdaf06d
SHA179c8fbec8ca8bdd6ae80f552e4105a6e4d17329c
SHA256770d94d3dde8f481a6f8ebdbe4dc5b29bf8018110f927bcc288e9562acffaa6c
SHA5121f651db03901bcc29ee074dd11967fd5c10529996b89117e8dc9f98e4a2871e7c4f6fa0cd53e6019f45e5cd1711ceba58bcb7d387132db8a6b0cca2e8027301c
-
Filesize
12KB
MD587041afb343e3f5b0dd2ec04938dad30
SHA111251b722b22c00387f45945b64cb297578e82d6
SHA25601d18c2b72884048e9870f8d13dd6dbcb1a8c27a1e7119e7dc9478958b875286
SHA512d1adfe1a7944bba4f4570eb02f81a8e7ca457511b4e3788451de9a6026777100be69fb3d6a9fc4a7e57b789c368974f849a5cca31a7274f9b29baf4404e92523