Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    03/09/2024, 06:47

General

  • Target

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk

  • Size

    4.9MB

  • MD5

    fc0f20db5f8098e42d845492fcf3fca4

  • SHA1

    380e9f9d17c1f13e66d367f4f8726200e2dee07c

  • SHA256

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19

  • SHA512

    d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1

  • SSDEEP

    98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.kongregate.mobile.bitheroes.google.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4812
  • com.kongregate.mobile.bitheroes.google.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4856

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db

    Filesize

    52KB

    MD5

    212a337771ab5b18e82e4d1b7acdea35

    SHA1

    092a996b96b0dc7006669f4a3dadc94357b25013

    SHA256

    802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417

    SHA512

    988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    8KB

    MD5

    c4597e40b0812d97027c21e4f35c3b72

    SHA1

    e1389dbe1afb5987bf392537d3de260f23cca78a

    SHA256

    76655f4feb1d878b7e534113dee15819967d8c6ac654f74dd58aaf7b09316408

    SHA512

    f17f489b1d490fbf1cab68ee0e05e78142f92cc9b1fd44bb5f80d6f3c31eba4ef36c474a848d6bf6a67460cf1909ce34c869aefc0f403e8230cd005f51c4fbfa

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    12KB

    MD5

    ec9759828c204b125f0b5b71a126b32e

    SHA1

    b53fd0b3b16e95bc165b706e5502906d0f3de5c8

    SHA256

    525f5d8355573820b9df79235f998ab1338033fb67a7f1946fbb50c89be377c8

    SHA512

    207da98f3d7e91ee8838e7351053856604b23027270e5c7a00ee98e4f82906d47c0be7a4670baf55a4d53320a5e9487f982ca1f67fdcd0a80b60e62623556227

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    155fc4ea89d2965e689e73967e052145

    SHA1

    1a343aef998118c2b6aa6e373dce831911170a07

    SHA256

    31b1d0b200ebbd6b7b58082262b68b0be29b53c00fd30d336a6299269b19abf1

    SHA512

    b58ae6c4672230f5105cf33e32558c84b00a6d257f2859ec96dc569d62baa9b6790c96b2300599f19253990c05f2ab76c7f7926ea6905baa174f97b9e2ca112e

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/files/Mint-lastsavedfile

    Filesize

    512B

    MD5

    e5e70ecd50bd41487a17e9471393b9a3

    SHA1

    35050227d145bee4e0a1d3f296ecff8a4f98fff6

    SHA256

    d7575af5eb2ed92f587b5a2e5ba74ab8f0543d4f9c80c3b20f0bc93131a77f05

    SHA512

    b4ebdbb8ce9c4fa6be39089753b02ddee355e813a207b69d6e1b3fb33a9036f8daacf1491265e71acc3286bd6317f8bdce4b16ee26f845d010bb316fcc133458

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/files/MintSavedData-1-1725959165036.json

    Filesize

    20KB

    MD5

    c39280292d6e8a69d4adb3a412382b2c

    SHA1

    38a5defb84a79638696d581c4d8a289449c85342

    SHA256

    8d3c4df09d4a981354b1378c8ca5ad5cf63cef448f41940170f312aa2345277c

    SHA512

    26abb091828fb2f502b1a90573ef02cd9cc5d21fd1ef95c241a83515b9f51ae0a4411e9e31e127f165e215e81e5f2a0111db3732b10fa367a02e4f1c6016f39b

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb

    Filesize

    116KB

    MD5

    480b143373b656e66f2167851bfde21e

    SHA1

    df219fb50d27bc568fe292a3e8b20c923c718a06

    SHA256

    e3e15cba17feeb61794c7e6dde6656008a73e9e7502c6c26f57ddc80de414c66

    SHA512

    d272112117421af570626ff35366969539bd4306a5f8eeb58b469fb35bca764dfc9fe7acfce4f51d7aea30e6537bba39a3562a2988cf5be3291a543c8b2ebbf7

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-journal

    Filesize

    12KB

    MD5

    04c2ef9695d5d92da10bb50156253a51

    SHA1

    91428dbc96efdf33910b3c85a73c037d9129e569

    SHA256

    04a91db46b09f794c233108508243aa3e31a4146c9336548f860308c463d66c6

    SHA512

    afb20a942bd9e104dd1f7561ebfddabc5fdd317ab3d6c467ba6892ecc628b1823419670cbefd6da5909ed535f3164849bb2030856fe49cf81d8091c5f9049860

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-shm

    Filesize

    44KB

    MD5

    427ef530082a4fb76b4cf09c7956bc73

    SHA1

    ff37660f5306724f294ff545f401d549f33ea1aa

    SHA256

    b2839a2fd859197a367ed6ad46830cfcf1d6adb69710df5b12d07e588d2f9ca9

    SHA512

    83f2a8839bf4cd83f1cc4af39834ae612f84b21f0d79925e036eebf08864d63741f0791c26dfea7cfdfc7dc6eaf6883e29c47bb42755c6724b7a0240ea33b81f

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    5c614bcbf8123e1f5e830d95fcbb5bf9

    SHA1

    03c89b77fc482244e93ae22027bcc3e9e3b0fd16

    SHA256

    61676fef87f43659f31ac87dcd7797dd4bf05a313c1572adc022caa00fecb47d

    SHA512

    a949bbfae91cd671b0eaa82e261eaf3368b2c34937f9e97b3a4e0f201a327bc3301ad900b110cdb9d81d071da46404dc399137fa56d43577d509293a194be384

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    6084b765efcb4ef66a495ec02ff17c3d

    SHA1

    c155432078d71c9fca9780562d6c5e5db58b519e

    SHA256

    6197c3848d1a19f90a974d243aeba79dbe9ebb6a61edea3c02eb517b488364b3

    SHA512

    0ab480efee9ee1a6388d16ebd5d84dbbf5dec8cf0a8a9c87319f10c389e9b47c3179f8137542f824c4b2906e78fffd6aca53ce00f65bea3b8ae943dec35b00bd

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    253KB

    MD5

    149fa107867c958964074a85090158fe

    SHA1

    95499f85c455b54638208b398856caeed99f6e51

    SHA256

    c14b0de3aa0ca1fb51d529109efe26de62ce3092e6b9c34ecc6c3b9117aea23e

    SHA512

    fca9afcf1726ffcd109cf1fb8df4f9d711575c0fe9d0202921c40fdacd760940e3a0e53c0ee3982f5500f3536c22595d0243c658543e153ada72ff4ae7dde3e7

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/com.google.InstanceId.properties

    Filesize

    12KB

    MD5

    c0d344671e3ea9ad05617cfe3d7156ee

    SHA1

    9246952f0a565c2e416d86e88792bc3930841d15

    SHA256

    1de99db8e480a93264896f08a0b53057312440edbebeaf13fdb1264c33373911

    SHA512

    e8ed9c8daf304b68be09053377ca555c350ffba9ea8673ff830400cd695405963980536df2fde095a4514916fe37e9cd1d16004c062386d21319cc9262ff50fb

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/credentials.dat

    Filesize

    227B

    MD5

    df234a718db4c73783c08f2da0c9f5da

    SHA1

    1be4ba57a5d6bd9b41cb564d1d20e4b30679aea0

    SHA256

    ab05cb83ebe57f5c135eb30454367d801f50228d9175f9b77b14d8f880a5495a

    SHA512

    c0dcdfc0b1efbaf7f40e1ba73ebd009a9f1910f130328e988c924b90a60d8203e23ede3ce09631bb698beefd21598d8e12390e6517a2409ebeae281879b51d9a

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    828eec8102fe44504bd26b8dee4ca66e

    SHA1

    11313bfde52d79ef9a270cc7720c8ed911efe081

    SHA256

    38c65cd085f83361c7c9202e439e3aabda708fc34fb0903005837c74df1566ab

    SHA512

    721d908925d6aeeb84179147f5ea7cc0c0d2ebd22abeaa77bbcbcbd0d2997021639692a23950f12d10fd3bce76e1dc85b617cad4611f6b6b463c54c86bf7cbe3

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    479d2c4c76dc25ea82ba6860ff139bd3

    SHA1

    6c8b75d53f4e7f06a438f9ad349ae53b4a67a988

    SHA256

    9f5b236c3b091c435ea2aa037f38c0751c30b196c5bf5886ebdccacabf66af7f

    SHA512

    1cf27e74a81cc462b8ad5cfc1e991b83851d679df411044c666566306423e61178fbb85908a6a443a49e05ebbadfd6ce16ad9a893297e3185e10781c8ecc75bf

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    c75e25d2f40a453a2442ab9506a97fa0

    SHA1

    748290cbbedb2796b24c58720aa0a4cfe18fafd3

    SHA256

    6772d592f0220b434d3b6fb5cd7c038cdf8eb0b1e1a28d4196977a64f9167edf

    SHA512

    bd0acc716abd076f33b729fd2723905a40a9181b31233f87d5fcd23e3c7d396deff393a91ea667edbf031a53971ddf0c93e2d2459a9fc6dbdd2a21a9b7db7f7a

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180

    Filesize

    36KB

    MD5

    c9d868e9656fe388060b817c484259a3

    SHA1

    9c0995dea34d9b82e78be9246acb0d292bb36f3b

    SHA256

    01eaaf56d1036d21e8a0fb229dceecfae28a25310bb03f650a5f71781c168eea

    SHA512

    c2fad3bd7da23dc1caf496f52a7fd91bebfafaf3e53d2d239388c457e9ac85c2a7ba85b980bc2be23aa8dba1225b488a5169fbb97c3eabb24962e48f1868c9f2

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    301KB

    MD5

    9ac6c357b3fbfcd60c79281635895c6b

    SHA1

    8b8a54f24ff718cdc2171d3b9e3cc3bf58e28898

    SHA256

    901f86ca2b8f5ab113b5216cc8f00bcd0aafd6c287296c87a44f342be2f14c5c

    SHA512

    602e3d10f65cfafbd537af5012180b7733761a4b33cf27ea9899691ff55144d927045e7c165d41fc01bb9a5bf1e9adce4566d91f89a365f147e8212fa5981be0

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    155476b59bb5a1f063cb39988219a87b

    SHA1

    ef04afbff96a3bce5e2c58c5f4319a3da0cea869

    SHA256

    59ee0575f13e758e2f2d23fd56aba10c4828884a84fb2789d0ee659986c721ac

    SHA512

    f9c270069ac3f22ca9cc3db9dade1a87b5f9ce8f96370e352b46f52b6fee46273fdd3d6f2da9c2618ba0aeac0e6c172cbbd91e83542c969f070998885055ed40

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    443ca143f7e184ec968f3cdc1d9cc5a4

    SHA1

    d45384de4c422fcf2a394b2b0c76d38a5cf5f5e4

    SHA256

    cc277496c180af6b02afe5a5ad922c7c71de21fbc161b101979b0eb58961420a

    SHA512

    b8448f99e17c9724eec7dba1384a14efcb83f4cc4c45086868c1d3adebb64322dc10afac71bb97d463b68d6e4c8bb3d9ae19e24e41b56195a3aed34d8378c536

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    f89bfc4731cc5d4fb895fe578a77ebdf

    SHA1

    3b2baa896c05fff6441cc9466e2373927817a7f3

    SHA256

    e98b8fcab96875aa5321b1f78c874b95f06a23d11a87dd9cb32a19ac1e0ca819

    SHA512

    97e5f210fcf91e6b339d028648bcdcef3867d118007eea6feda6bf90c27a4d3fa048657b5a42055984cf51c21d6e6861608de7fc6942c6834c0b06c2aab8c739

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    0a2806aba3f059692dff571be337ed99

    SHA1

    87654b4c1456cecc2c1ea5b298a6ae25fe853429

    SHA256

    00aa8b841fc8f1cd8c6e5363fd0ec50bf85a4a2717adac564ff3cbe7a494570d

    SHA512

    63afb0618999ec0f916fe906730d3d61b9268a8418109d4a15fe8e6e0f49579b61504dbef1312a3485b5d8b6b2f0719466b2abca97f68d9cc8ae258907520451

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    e73a06f5d3747883e66fd41e403602cb

    SHA1

    a7921feaf338d6210b37f7d99b2e320e468b77c8

    SHA256

    11e476ddfc5350073bb3fdc3084153464a87244e123177981b45318b2c0fdc48

    SHA512

    cdc07de6bd5b8b658c77e6c12a6078ba2b6e2aa0ff1b45bd227bd5de8617c65c20c689ba5216258202c85fddf85025e04674f31261a4d6661bff59887e6b4aec

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    fc318483a677c71a725dbbe6e9516df9

    SHA1

    8ac3af9cbfb464e53b709028d1f64a4d019bb2f4

    SHA256

    d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9

    SHA512

    0e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    4af98613a27a70beb5883cd65a228373

    SHA1

    80bfe9e0555300c1f7d45c02169136372e0b4ba3

    SHA256

    df1ae0f9fc37820b735474aadc5f526d846e24106af374ce120918bc3ef804d3

    SHA512

    c580a59d3d2bee2c16847e7ead02f4454c4b33a627a3714065f69697cf23d7710c84c479803fd0ae62ef76d23e019c8ac889c7b04cdf0a8372d42d766caecfa4

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    44KB

    MD5

    485f6a82d853fbc2026c2f0cb03e32aa

    SHA1

    c253c9a4ea5ce6023916a54bfc5f8877ed39e13c

    SHA256

    e746fc2890067351f85b3f4592190adf3ff6ba5f1201967718471921ecee45f1

    SHA512

    f26753ed5e6fa1c6ba73d8d38dde8baa50ab0451fd1539573fffada1d5e464d9fb1636c3d5fd09bc52ce7da83df71adfa26acf9a153e89f8cbf4738bed4b9152

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    2940a1a192c92e7ab8480b5bc301cf95

    SHA1

    5c8807e6c22ac024b535370b4401c8ce9a5ab9ae

    SHA256

    c9fde4f720cf3285865b315098651aa0a36877e022bf4543c9830b339bc5edc4

    SHA512

    f1d744f3b0ac6b11d2e14bed82c80d6fd55d3e1cf0215f97c99c16fa12fe120b1cd86c7a23d83a4a6f9a889267668a92c6bc54f43ed45416caee0e0b968f8722

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    fbaef7166a247f2d1a95351d700bfdcf

    SHA1

    4a2ec95ef8b5a0df7f9891c854f3ee9e3e6da7df

    SHA256

    4246d6b0df361a4e09ea02460b443866498422d53ea3c75dfe623348a9700e68

    SHA512

    dcd3e99ecbf86965475d38a484bd3ce05a26063a16f8ad373275cab5e3d1b74a336e451688255a0e2d2b6d1330b403119841756cf27b77978bd07d586d4dc050

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    2bc52120094484c1c27426806e34ba09

    SHA1

    a972c0c3765beb33b011e4de645ef1ae310a6df9

    SHA256

    fa72a2f85375134aa90686fde8888a8d9749d6627ca395df9f859e09d0bc10ce

    SHA512

    3b96b6523c05b4300b9c2dd2cc8985f387a73355a536be94d0d241803b17c721834abe9e80cf12f06ded5b0c3705a0c30ba09885649f61c3cc3ed04966140e57

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    a311ef302b89b1cae193ed3c981b432c

    SHA1

    3e7a130f646174ffb9aa5cb83b5c0dd8d463a55b

    SHA256

    b55820382b98c1a63a7acfe736d1a5879493afa5b203d31454aad55d6a61355c

    SHA512

    3841970ce6341fe26a856400adb3d020b4eb84f4e948f251a532472c7785bd8c3350f51c948e10cf94ca233e5079a4734c4c21979af11379084907c6201bd9ee

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    20KB

    MD5

    0d0491228f0733d9393290cdabdaf06d

    SHA1

    79c8fbec8ca8bdd6ae80f552e4105a6e4d17329c

    SHA256

    770d94d3dde8f481a6f8ebdbe4dc5b29bf8018110f927bcc288e9562acffaa6c

    SHA512

    1f651db03901bcc29ee074dd11967fd5c10529996b89117e8dc9f98e4a2871e7c4f6fa0cd53e6019f45e5cd1711ceba58bcb7d387132db8a6b0cca2e8027301c

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    87041afb343e3f5b0dd2ec04938dad30

    SHA1

    11251b722b22c00387f45945b64cb297578e82d6

    SHA256

    01d18c2b72884048e9870f8d13dd6dbcb1a8c27a1e7119e7dc9478958b875286

    SHA512

    d1adfe1a7944bba4f4570eb02f81a8e7ca457511b4e3788451de9a6026777100be69fb3d6a9fc4a7e57b789c368974f849a5cca31a7274f9b29baf4404e92523