Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20240910-en
  • resource tags

    arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
  • submitted
    10/09/2024, 09:41

General

  • Target

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk

  • Size

    4.9MB

  • MD5

    fc0f20db5f8098e42d845492fcf3fca4

  • SHA1

    380e9f9d17c1f13e66d367f4f8726200e2dee07c

  • SHA256

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19

  • SHA512

    d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1

  • SSDEEP

    98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Checks if the Android device is rooted. 1 TTPs 3 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.kongregate.mobile.bitheroes.google.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:5102
  • com.kongregate.mobile.bitheroes.google.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5148

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db

    Filesize

    52KB

    MD5

    5f95caa096ebd3fe93432163e3fd2d34

    SHA1

    48c9bba88699f9fbf625d27b189ab4395662ccc2

    SHA256

    c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3

    SHA512

    e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    8KB

    MD5

    cf27e696163f90de6a4493341fefef22

    SHA1

    9321e69ad250c9c464ac8e6007c7eb5fc57dadbd

    SHA256

    9178505945f7279012664dfd46cc8d312e899962c91e11a4c851e1554c05be8e

    SHA512

    3030511faad95a7ecd04ea0d71374b3a5eeefeff17d37c3c509fda1880269767681e54818728481bc230dc5b944cec1e0fd1a61fb30cf2c3db26b8bd805bef38

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    8KB

    MD5

    d72b5942deae055f896910a99be98108

    SHA1

    ca544902eafd8a42e5b42bcf027d6231d1cf87f2

    SHA256

    f1438e2fef1cb7d2b86d0c42b67a02557ca658af37eaa822db2e04e653dfb2ae

    SHA512

    671d66e6a4f1b4d9b23074fcd7092459bc0fe3655ce817f63278e91a6c8cd3f34757594a8861b55923b57f037660326a2a3de3cf4b3a56ca1e0ba6303b084f33

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    85291ced3ac65dc2c6bbebcee1044cc4

    SHA1

    5f9009793230beca51e26748d9a9881cb30b2d70

    SHA256

    456813f8cc039f339045672fe419b49c621f14d55ccfba579b54abc07780fdbb

    SHA512

    4b55141a9d26ca02db72d2863a5a565f4470b130839e388bfbeb09e3f337687122f74111516cf61fb625fa0f8902d8296951ddead2ab2340a11b04d302028270

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/files/Mint-lastsavedfile

    Filesize

    512B

    MD5

    78be0755634d3f506714c027fa42f058

    SHA1

    207b16e64402acbf54f02c1d75efcb7d3dbcc7c0

    SHA256

    1794ef259f3a1b178e80741e204b1b353cc1b2f2c8b92e19d6fb4471c223715a

    SHA512

    b2ec3157637837b7641e895f3cf3a484923958515a17ab1d64ef21f98ed677b6bbe02e896a3355288f20bcf647e0cfcfaf1835f7fa35ddd79a387cd9c53bc76b

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/files/MintSavedData-1-1725961309687.json

    Filesize

    20KB

    MD5

    32e643d0b5cbbda13f1b9179911ab579

    SHA1

    ace70c61d5db9a2f342767e9c4e1c17713487de1

    SHA256

    ad28205a4066e496ac3fc85a45d2ed9ef13875dba4a91d855cb271a2b71dde68

    SHA512

    fcf66d88fc0f5d5e8ca71e791178e05623461aeeacd9d8f736583ef04676c4d5cd897f15243afd4aa73bff2d50911546fe1321dbbbf1de353870f54a30bd01b0

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb

    Filesize

    12KB

    MD5

    17079a7d1a8423e521dfacfa971a6e62

    SHA1

    8cf27a573dba9dc1dc737e956ae1ccc6a74a8c03

    SHA256

    b4b1b9c87ff1376e4831b94710a1b17a15eb4e7a67fbdc572e3a1e0f1d002dc7

    SHA512

    095d1285467fdc419a84210ec1872cb0859a17e16c9eeffb22683f4358d5f05df7028984905afa23b27d3a8151793c2512bdd4c14692f396f35fb7cde0f4c413

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-journal

    Filesize

    12KB

    MD5

    e5c5fe635190bd7cab2b097653f73035

    SHA1

    817ef9a1c3cae5ba104b9349026c92f2672df709

    SHA256

    b1828281209a3f8ef075ec9fd0fb9e32a760bd0e9db5deaa1492d5ea92b10d6e

    SHA512

    7d035fe7c65e35e9759c64bc7133c6129a19855d02c172f6b19f102c3e8a961a5c547f58f15efcb3dcce4a290986f9fc0f8c327e9c01027abf163539237cc7d4

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    f4b14379926f0a9fd8fdeaaba0ca9599

    SHA1

    6c48185b6fb92a0f4e9c0d00d2b65230cbcaad30

    SHA256

    e788509b58d37b2c8565d15ffafa54ee1bfc796d347a3bdc5ad8ba1c9e292563

    SHA512

    df071abd802b9ca52cf13bb04d55183a20301d8807f669e56eb1da7da2a20a72091a6ef8f251a124ff0ac9c14c11aee5d418799dff0b86fc9fda700a58f5e474

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    44KB

    MD5

    507831d17f9b205c1a5f4bcba9aa88a2

    SHA1

    7a5a9db79532659a58a7e18df6fe458fe9b71f10

    SHA256

    dcb4486feb1526d089e8ace48d5ec0a43cffd1ab9cbcdf98ae7c13d554fcbf8c

    SHA512

    e97601d68c3664b5bc40fd8d1e5477d8661eec5765e505372b0e8945e9d41517edf583156d12c501791e95ed86cc23810131e2cf30b5391165e3258dd0a94ce3

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    7e6683ec1f4a2660b305fc94a83a83f8

    SHA1

    3c2c49c51f38fb1871f5f5593c436012527103ba

    SHA256

    b3cbc06a41381db7fb743a2f5e1a4d425653733090296f705f01500492ae2a91

    SHA512

    f5f7ffed4edf91bd84141bd55f680fd9f28084f2aef7f5658bc9ed87a84fbd0e160ae62586693a31855d08af27abc8a8ccade30c0ec3853f28ca2b95d6785d85

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    116KB

    MD5

    a6b7e957614ebb1fbf4b46d1e79a50c5

    SHA1

    94ea0d5aff7e1bdd5cb14ce28a97da5524b28759

    SHA256

    b52f76fcd97d36e4c6b4e5d9e73ba7405e143dbb1f00a5c4b5ef5a941cf57540

    SHA512

    ba439375b9f92b6b9e0c21e07c99e65d01537a609d73802316b84665bd938d03fc6813fc176e59969d7d0cb2c73622fe9e0956b911e3ae21ac8775dec0895b64

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    309KB

    MD5

    fe4fa5fdadd63b1a7fa5fc548260b49c

    SHA1

    453defe8f8df84fd4e6dbf8ff21ca329df7cea91

    SHA256

    e13f8c1b7a51edfdac94574b62a0403adbdae652d70c40afc15f6200d8cad615

    SHA512

    598441d5e077c231602590b8445e05a2deaca8661903ff1c2832596fdcdfc58051bfa2b3cf300458bf091b12c6e5921c27d8b3bdbc89e29788c1cca76560ccd3

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/com.google.InstanceId.properties

    Filesize

    12KB

    MD5

    334b17fc25e83c5d5104e8479ac691c4

    SHA1

    7ec92e73502bdc66c53ed777a965c1d9ecb78f0a

    SHA256

    afa1c13196e3b7bbc8cad476208938faaa24c434e45f2a190d55a98d9f7e198a

    SHA512

    e6c36ac9a2834f3203969643fa47e954c50a98ca74920e557c9e0d3c8ceccbce03192220cdce912e7fdf9423b1f9718fa24d6dd755153ca72f51ab98bed6ea61

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/credentials.dat

    Filesize

    226B

    MD5

    ee337b7a70c8d31f5891b59d6164cf6f

    SHA1

    f5f5d9e3ae7e9d855ee5ff5ccee254b00a41a427

    SHA256

    4169089c48f985722cd76c07630968dfc40a1051f0efd62533b85c66c3d19009

    SHA512

    e2a09cfd9fe3be93708ff242e5bba631db3b3288bba4e569267c02465fe64265d57818012cb690589a51f3b7b18c71f601b1f84bebfa1118ce57432ce0d2c30f

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    aaba87881a83a70321815e14f7c01a2a

    SHA1

    6bb55358dec4065efc1e39e7a13c6120498efc53

    SHA256

    e59327bf081829a4d5c06781978c387e7e069a62c4a2d4581247d18d14fa9439

    SHA512

    06ef7ab1d15ec9438493b8cb9bf160f253fb89298cbd7c234a722995077c4f86dd059852ec8b843ff923b8f89aa05a745166b7420ab8bc6cfdab703820d11198

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    12KB

    MD5

    168375c67518417f5cad7af6960b867c

    SHA1

    859125d76f514f0f780539e90d859486d0b6cb9c

    SHA256

    9f2dd1d12442391274522125c718f7a3e0bf37d77f8719adddbf42643fc7d5dd

    SHA512

    30ccc3ee41c2822a989e54cc3ad62e294de0d81b65e336519f534778d25ea72a07790dfe26c75d9c40ae211a55bf89d8ae7a9041942972cd5246438c8efab690

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180

    Filesize

    36KB

    MD5

    a44604017d398d649dbc6f3f15bae87c

    SHA1

    e069a111381069927c9f028f2aff38316bd1d6ad

    SHA256

    577ba4012a8c6074a0b6b99c607bfc83be0bf982a5ad7e34ba2a2ddb228765d4

    SHA512

    024a201a7eabdc8e723b17abe346139894fe04c6557a722cbffa8ade2b1ed67e7a6af73b7f794852cb4a9f51585fdd0b1d91fb4a9d5609db539976548b9abf40

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    358KB

    MD5

    dd0bcfaa4b5b26a7e5201af55f647020

    SHA1

    d18ddbd63f39c895d9dd6a3eb79247b4c6cdbd66

    SHA256

    bc1d0a376d45eb78e108c34c714afc376f145cbe181f6ce0b5598a0d4300e632

    SHA512

    881e34e5238bcebd89b54512ea0292961531df50b80ea3fdc50b83f97d8678b2ccba345fb6ded94ccec425db2cf4abc579e592e4b09140bf48097838857fd3a7

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    ad9d6fd6bbd9a3e284854345d3fcb0d8

    SHA1

    8274a59257f7557dc836ab71c32f94f309c3ab8a

    SHA256

    0764fdc6654dc589a654d32dc4d5b881e2280733a058a34f0a38f5a9ebfa0175

    SHA512

    efa3256db47cfb0af29550e7cbb72a38b5411b834315d4a19b516a41f51016ba579acb12c74c9b34e35d6b42656a6ffd885b507be3756923b0a59f46e11291e4

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    2bec2652c6a139162b25f9d6553497ab

    SHA1

    204b6c1ba263845938df45b41a757d40a2e57aae

    SHA256

    b86eabbde5b50bab56027f31b08859e8052bf66a5b4efe5949ae2b6fcb543385

    SHA512

    e27bf51ce6ea56b88a82748f21de48c3d8795a147dcc0752a0793087e913a5e75652489e940c8bb03dc8d414ed36ec2284f690b4fa5d6049605edb654ff19bf0

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    31d9cc76c951b3cc75c06f3703e1084b

    SHA1

    96088d53b1cd3e0a91e37c75697fa1590d1059c8

    SHA256

    437c53b18d8b2f41729ac830ad6efc601ca9deff7700bf8e4a0fc6723b03c30e

    SHA512

    e903873669f725925b0d3436c45c367237e847755f6a23cf83b606d0d9382ffc8a936932af67238e5b62782fbff1c06b0e65b78dcbc30938552736ea907bd6dd

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    9e651b004bf16d33e44068484e86cd30

    SHA1

    df2ecaf0d368cd6f7f6f0958d5168dcaa02c3008

    SHA256

    5510f2c534dc29ccab7b979bcf9529cd0066ba23db429a0d19aa81a939f7dc71

    SHA512

    4557f318d799823c3d8f3c251112add917a42d17cade4e04c7716b38a795bbd9bc76b8be5792f0d75abddc4eb5b586ae2453eda59468e10d657e49b4fea02d37

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    48642e31a35b49d417a1630e1dc775e4

    SHA1

    607437c33900d15538f255a40b357fe139beb45c

    SHA256

    b83b61fd2b8caec89684dcf0c0ccc60e2e520e1859abbdbc93e65d61c5566d34

    SHA512

    0ceb26757067dee05e28452686877e30d9be8a9d4cf59ea79a940064c878d468c1960267cf1756dc15af717563df283ba9c9bb01dbcfce7287c64982f0295d82

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    a0a548793a510f9caed081689f935eeb

    SHA1

    2d1aad0213b2b86bfe52dd2485741fb00eb02f3a

    SHA256

    4564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5

    SHA512

    624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    60c62ff659a441c0e31724041b1faed7

    SHA1

    401e3b13d0b5daba5fb3b1dd9e6e141f5247aa97

    SHA256

    bb326847edc2a488e989642238e3fbe3cf0f6a50a8dd75f20b3e91ba56824de8

    SHA512

    32c6ded813dba87c47e6e2ba27c01733ecaa62c9983632b96d10196f901417af9d41ce222acb69501e59c6eb2bb7c5180f1d768e05e463bac25b5d6833577356

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    e14024550c05faf168c2b1172fb8ad99

    SHA1

    e32265030fad2f076920a4ce69307eccf155d2e7

    SHA256

    5c8dfb29fec76d1bb77b70989b56d490e7e5dacd440db50b9cfdbf45eed41ac1

    SHA512

    3793d0ad3fd81898d0b299e5d68da92e509e85dfcda2a14dd63e347a3b352db7f895ffba81d6365f6dfffbcd055d6432a9d8a073ea05f8a004578c9222173f85

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    64c732bd4eb1ef041870f390c6067e20

    SHA1

    b3837937e0de6098541ea5a9c8397a357b15d452

    SHA256

    f33693ae5db4f956e8a82204c57cd1359b84cfe1031a6c0784edd4b76517ec0e

    SHA512

    bb4edb3e4fd5e9d6d44ba49300e7681ebb9b0c64c79b801347df7b61f6b70f23dc92b6bc3bbb3dbd11fb42d46316a500fced0e13fef083afd9315c91c4873a43

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    8KB

    MD5

    de0a32f729e4249cdd873a2003d37f29

    SHA1

    d31baea3f168318f6db0d5827e0fe25eda78d566

    SHA256

    edce8c81438b88d1bb87bdce9452be98d08375be6c4a763ba7fc133afb03fcfd

    SHA512

    93718a4f836b0fc206ce73e6cbb565f6f4dd5bbe4a5d6075dfcaabcf94762a9e3e9b33dfaac3f0b988f854405fd3e6a4045de6517dc9b769834f72e831a546ae

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    20KB

    MD5

    0db47d566e2723bef62fc7b49f5c291f

    SHA1

    7f2abce69cc98ecd8bc53bc0ebdaca4ea95314d2

    SHA256

    0fb150c7e9bb9a152ad3d3a9d4c7bbbe79ec3312c44c4cc663c7a077eba96731

    SHA512

    453b649f5a6ab8af7c534f9c7fd47d4ef527ecbd6b59d6aff362c794ad710645e3c2f33cd670f478a38ccd473aafe9477695f8ab6e9353d21e7f5e7bd9427c74

  • /data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    44KB

    MD5

    1318d396d12c64e6efb3786ed07b25f8

    SHA1

    1b38dae0a8c6945037356d821d916fa29ae61b8e

    SHA256

    bbf12d4496de2dfbc6470c3a38f22c4363f0cec7a810e47ed04958bfdb4cde4f

    SHA512

    feadc47bcc0c45cc6a131efe3c629a46d05e842ef9d3d3cf42265658accd90ac6d0c9abafa15b36a8aced86b2c724282737f9d983ad73fffae0e5b958eeeb824