Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system -
submitted
10/09/2024, 09:41
Behavioral task
behavioral1
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack:Metrica Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5102
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5148
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD5cf27e696163f90de6a4493341fefef22
SHA19321e69ad250c9c464ac8e6007c7eb5fc57dadbd
SHA2569178505945f7279012664dfd46cc8d312e899962c91e11a4c851e1554c05be8e
SHA5123030511faad95a7ecd04ea0d71374b3a5eeefeff17d37c3c509fda1880269767681e54818728481bc230dc5b944cec1e0fd1a61fb30cf2c3db26b8bd805bef38
-
Filesize
8KB
MD5d72b5942deae055f896910a99be98108
SHA1ca544902eafd8a42e5b42bcf027d6231d1cf87f2
SHA256f1438e2fef1cb7d2b86d0c42b67a02557ca658af37eaa822db2e04e653dfb2ae
SHA512671d66e6a4f1b4d9b23074fcd7092459bc0fe3655ce817f63278e91a6c8cd3f34757594a8861b55923b57f037660326a2a3de3cf4b3a56ca1e0ba6303b084f33
-
Filesize
512B
MD585291ced3ac65dc2c6bbebcee1044cc4
SHA15f9009793230beca51e26748d9a9881cb30b2d70
SHA256456813f8cc039f339045672fe419b49c621f14d55ccfba579b54abc07780fdbb
SHA5124b55141a9d26ca02db72d2863a5a565f4470b130839e388bfbeb09e3f337687122f74111516cf61fb625fa0f8902d8296951ddead2ab2340a11b04d302028270
-
Filesize
512B
MD578be0755634d3f506714c027fa42f058
SHA1207b16e64402acbf54f02c1d75efcb7d3dbcc7c0
SHA2561794ef259f3a1b178e80741e204b1b353cc1b2f2c8b92e19d6fb4471c223715a
SHA512b2ec3157637837b7641e895f3cf3a484923958515a17ab1d64ef21f98ed677b6bbe02e896a3355288f20bcf647e0cfcfaf1835f7fa35ddd79a387cd9c53bc76b
-
Filesize
20KB
MD532e643d0b5cbbda13f1b9179911ab579
SHA1ace70c61d5db9a2f342767e9c4e1c17713487de1
SHA256ad28205a4066e496ac3fc85a45d2ed9ef13875dba4a91d855cb271a2b71dde68
SHA512fcf66d88fc0f5d5e8ca71e791178e05623461aeeacd9d8f736583ef04676c4d5cd897f15243afd4aa73bff2d50911546fe1321dbbbf1de353870f54a30bd01b0
-
Filesize
12KB
MD517079a7d1a8423e521dfacfa971a6e62
SHA18cf27a573dba9dc1dc737e956ae1ccc6a74a8c03
SHA256b4b1b9c87ff1376e4831b94710a1b17a15eb4e7a67fbdc572e3a1e0f1d002dc7
SHA512095d1285467fdc419a84210ec1872cb0859a17e16c9eeffb22683f4358d5f05df7028984905afa23b27d3a8151793c2512bdd4c14692f396f35fb7cde0f4c413
-
Filesize
12KB
MD5e5c5fe635190bd7cab2b097653f73035
SHA1817ef9a1c3cae5ba104b9349026c92f2672df709
SHA256b1828281209a3f8ef075ec9fd0fb9e32a760bd0e9db5deaa1492d5ea92b10d6e
SHA5127d035fe7c65e35e9759c64bc7133c6129a19855d02c172f6b19f102c3e8a961a5c547f58f15efcb3dcce4a290986f9fc0f8c327e9c01027abf163539237cc7d4
-
Filesize
32KB
MD5f4b14379926f0a9fd8fdeaaba0ca9599
SHA16c48185b6fb92a0f4e9c0d00d2b65230cbcaad30
SHA256e788509b58d37b2c8565d15ffafa54ee1bfc796d347a3bdc5ad8ba1c9e292563
SHA512df071abd802b9ca52cf13bb04d55183a20301d8807f669e56eb1da7da2a20a72091a6ef8f251a124ff0ac9c14c11aee5d418799dff0b86fc9fda700a58f5e474
-
Filesize
44KB
MD5507831d17f9b205c1a5f4bcba9aa88a2
SHA17a5a9db79532659a58a7e18df6fe458fe9b71f10
SHA256dcb4486feb1526d089e8ace48d5ec0a43cffd1ab9cbcdf98ae7c13d554fcbf8c
SHA512e97601d68c3664b5bc40fd8d1e5477d8661eec5765e505372b0e8945e9d41517edf583156d12c501791e95ed86cc23810131e2cf30b5391165e3258dd0a94ce3
-
Filesize
108KB
MD57e6683ec1f4a2660b305fc94a83a83f8
SHA13c2c49c51f38fb1871f5f5593c436012527103ba
SHA256b3cbc06a41381db7fb743a2f5e1a4d425653733090296f705f01500492ae2a91
SHA512f5f7ffed4edf91bd84141bd55f680fd9f28084f2aef7f5658bc9ed87a84fbd0e160ae62586693a31855d08af27abc8a8ccade30c0ec3853f28ca2b95d6785d85
-
Filesize
116KB
MD5a6b7e957614ebb1fbf4b46d1e79a50c5
SHA194ea0d5aff7e1bdd5cb14ce28a97da5524b28759
SHA256b52f76fcd97d36e4c6b4e5d9e73ba7405e143dbb1f00a5c4b5ef5a941cf57540
SHA512ba439375b9f92b6b9e0c21e07c99e65d01537a609d73802316b84665bd938d03fc6813fc176e59969d7d0cb2c73622fe9e0956b911e3ae21ac8775dec0895b64
-
Filesize
309KB
MD5fe4fa5fdadd63b1a7fa5fc548260b49c
SHA1453defe8f8df84fd4e6dbf8ff21ca329df7cea91
SHA256e13f8c1b7a51edfdac94574b62a0403adbdae652d70c40afc15f6200d8cad615
SHA512598441d5e077c231602590b8445e05a2deaca8661903ff1c2832596fdcdfc58051bfa2b3cf300458bf091b12c6e5921c27d8b3bdbc89e29788c1cca76560ccd3
-
Filesize
12KB
MD5334b17fc25e83c5d5104e8479ac691c4
SHA17ec92e73502bdc66c53ed777a965c1d9ecb78f0a
SHA256afa1c13196e3b7bbc8cad476208938faaa24c434e45f2a190d55a98d9f7e198a
SHA512e6c36ac9a2834f3203969643fa47e954c50a98ca74920e557c9e0d3c8ceccbce03192220cdce912e7fdf9423b1f9718fa24d6dd755153ca72f51ab98bed6ea61
-
Filesize
226B
MD5ee337b7a70c8d31f5891b59d6164cf6f
SHA1f5f5d9e3ae7e9d855ee5ff5ccee254b00a41a427
SHA2564169089c48f985722cd76c07630968dfc40a1051f0efd62533b85c66c3d19009
SHA512e2a09cfd9fe3be93708ff242e5bba631db3b3288bba4e569267c02465fe64265d57818012cb690589a51f3b7b18c71f601b1f84bebfa1118ce57432ce0d2c30f
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5aaba87881a83a70321815e14f7c01a2a
SHA16bb55358dec4065efc1e39e7a13c6120498efc53
SHA256e59327bf081829a4d5c06781978c387e7e069a62c4a2d4581247d18d14fa9439
SHA51206ef7ab1d15ec9438493b8cb9bf160f253fb89298cbd7c234a722995077c4f86dd059852ec8b843ff923b8f89aa05a745166b7420ab8bc6cfdab703820d11198
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize12KB
MD5168375c67518417f5cad7af6960b867c
SHA1859125d76f514f0f780539e90d859486d0b6cb9c
SHA2569f2dd1d12442391274522125c718f7a3e0bf37d77f8719adddbf42643fc7d5dd
SHA51230ccc3ee41c2822a989e54cc3ad62e294de0d81b65e336519f534778d25ea72a07790dfe26c75d9c40ae211a55bf89d8ae7a9041942972cd5246438c8efab690
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD5a44604017d398d649dbc6f3f15bae87c
SHA1e069a111381069927c9f028f2aff38316bd1d6ad
SHA256577ba4012a8c6074a0b6b99c607bfc83be0bf982a5ad7e34ba2a2ddb228765d4
SHA512024a201a7eabdc8e723b17abe346139894fe04c6557a722cbffa8ade2b1ed67e7a6af73b7f794852cb4a9f51585fdd0b1d91fb4a9d5609db539976548b9abf40
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize358KB
MD5dd0bcfaa4b5b26a7e5201af55f647020
SHA1d18ddbd63f39c895d9dd6a3eb79247b4c6cdbd66
SHA256bc1d0a376d45eb78e108c34c714afc376f145cbe181f6ce0b5598a0d4300e632
SHA512881e34e5238bcebd89b54512ea0292961531df50b80ea3fdc50b83f97d8678b2ccba345fb6ded94ccec425db2cf4abc579e592e4b09140bf48097838857fd3a7
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5ad9d6fd6bbd9a3e284854345d3fcb0d8
SHA18274a59257f7557dc836ab71c32f94f309c3ab8a
SHA2560764fdc6654dc589a654d32dc4d5b881e2280733a058a34f0a38f5a9ebfa0175
SHA512efa3256db47cfb0af29550e7cbb72a38b5411b834315d4a19b516a41f51016ba579acb12c74c9b34e35d6b42656a6ffd885b507be3756923b0a59f46e11291e4
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD52bec2652c6a139162b25f9d6553497ab
SHA1204b6c1ba263845938df45b41a757d40a2e57aae
SHA256b86eabbde5b50bab56027f31b08859e8052bf66a5b4efe5949ae2b6fcb543385
SHA512e27bf51ce6ea56b88a82748f21de48c3d8795a147dcc0752a0793087e913a5e75652489e940c8bb03dc8d414ed36ec2284f690b4fa5d6049605edb654ff19bf0
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD531d9cc76c951b3cc75c06f3703e1084b
SHA196088d53b1cd3e0a91e37c75697fa1590d1059c8
SHA256437c53b18d8b2f41729ac830ad6efc601ca9deff7700bf8e4a0fc6723b03c30e
SHA512e903873669f725925b0d3436c45c367237e847755f6a23cf83b606d0d9382ffc8a936932af67238e5b62782fbff1c06b0e65b78dcbc30938552736ea907bd6dd
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD59e651b004bf16d33e44068484e86cd30
SHA1df2ecaf0d368cd6f7f6f0958d5168dcaa02c3008
SHA2565510f2c534dc29ccab7b979bcf9529cd0066ba23db429a0d19aa81a939f7dc71
SHA5124557f318d799823c3d8f3c251112add917a42d17cade4e04c7716b38a795bbd9bc76b8be5792f0d75abddc4eb5b586ae2453eda59468e10d657e49b4fea02d37
-
Filesize
20KB
MD548642e31a35b49d417a1630e1dc775e4
SHA1607437c33900d15538f255a40b357fe139beb45c
SHA256b83b61fd2b8caec89684dcf0c0ccc60e2e520e1859abbdbc93e65d61c5566d34
SHA5120ceb26757067dee05e28452686877e30d9be8a9d4cf59ea79a940064c878d468c1960267cf1756dc15af717563df283ba9c9bb01dbcfce7287c64982f0295d82
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD560c62ff659a441c0e31724041b1faed7
SHA1401e3b13d0b5daba5fb3b1dd9e6e141f5247aa97
SHA256bb326847edc2a488e989642238e3fbe3cf0f6a50a8dd75f20b3e91ba56824de8
SHA51232c6ded813dba87c47e6e2ba27c01733ecaa62c9983632b96d10196f901417af9d41ce222acb69501e59c6eb2bb7c5180f1d768e05e463bac25b5d6833577356
-
Filesize
12KB
MD5e14024550c05faf168c2b1172fb8ad99
SHA1e32265030fad2f076920a4ce69307eccf155d2e7
SHA2565c8dfb29fec76d1bb77b70989b56d490e7e5dacd440db50b9cfdbf45eed41ac1
SHA5123793d0ad3fd81898d0b299e5d68da92e509e85dfcda2a14dd63e347a3b352db7f895ffba81d6365f6dfffbcd055d6432a9d8a073ea05f8a004578c9222173f85
-
Filesize
12KB
MD564c732bd4eb1ef041870f390c6067e20
SHA1b3837937e0de6098541ea5a9c8397a357b15d452
SHA256f33693ae5db4f956e8a82204c57cd1359b84cfe1031a6c0784edd4b76517ec0e
SHA512bb4edb3e4fd5e9d6d44ba49300e7681ebb9b0c64c79b801347df7b61f6b70f23dc92b6bc3bbb3dbd11fb42d46316a500fced0e13fef083afd9315c91c4873a43
-
Filesize
8KB
MD5de0a32f729e4249cdd873a2003d37f29
SHA1d31baea3f168318f6db0d5827e0fe25eda78d566
SHA256edce8c81438b88d1bb87bdce9452be98d08375be6c4a763ba7fc133afb03fcfd
SHA51293718a4f836b0fc206ce73e6cbb565f6f4dd5bbe4a5d6075dfcaabcf94762a9e3e9b33dfaac3f0b988f854405fd3e6a4045de6517dc9b769834f72e831a546ae
-
Filesize
20KB
MD50db47d566e2723bef62fc7b49f5c291f
SHA17f2abce69cc98ecd8bc53bc0ebdaca4ea95314d2
SHA2560fb150c7e9bb9a152ad3d3a9d4c7bbbe79ec3312c44c4cc663c7a077eba96731
SHA512453b649f5a6ab8af7c534f9c7fd47d4ef527ecbd6b59d6aff362c794ad710645e3c2f33cd670f478a38ccd473aafe9477695f8ab6e9353d21e7f5e7bd9427c74
-
Filesize
44KB
MD51318d396d12c64e6efb3786ed07b25f8
SHA11b38dae0a8c6945037356d821d916fa29ae61b8e
SHA256bbf12d4496de2dfbc6470c3a38f22c4363f0cec7a810e47ed04958bfdb4cde4f
SHA512feadc47bcc0c45cc6a131efe3c629a46d05e842ef9d3d3cf42265658accd90ac6d0c9abafa15b36a8aced86b2c724282737f9d983ad73fffae0e5b958eeeb824