Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
152s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
10/09/2024, 09:41
Behavioral task
behavioral1
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /system/bin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack /system/bin/su com.kongregate.mobile.bitheroes.google.hack -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks memory information
PID:4823
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4870
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
8KB
MD55ef8286489128eed8bd1c2d568bad0bf
SHA1d6e358ef16d40a9205925d0d07bee8809ae786af
SHA2560f401250cca481e59ffc5c1f5e565739ba9d5a45cbe21738e33d2e9336b65f2a
SHA5125dddae2281aac4a69f3c44b701988eb37caa07415fed611b2280be9563fb1148f364aa7ced628a646821e346748d05df60afe113d22f73cc68417789381524ba
-
Filesize
44KB
MD5f9021edec478fa8c4916cdd1e4706f7f
SHA1b0edacf35140d4bdd3541a5171c11c328f6a0e43
SHA25643968673d3a7afe255aa738533c1273777d331aa742bc5f5d2a8a108b39023d7
SHA512ecb493df794e036cffb34a7f6f01f3c75aff5940a6d2fe51180b1b58f0d6edfefcf8800e15b57072c3efaf4dc5f5b3fffd809e3f88718b0bb730e1feed93afc2
-
Filesize
8KB
MD5bbb22db2f35c432cf72ec6a9a21026de
SHA13dd2d4a24904fb698b4248fdcf04f8aa0766767f
SHA256936d0ae646ae13c89509593ff232adf5267c05bf94d29196f55409e69fc901a4
SHA512c82acc235ac7dc3a99c623097d66cf8ea20d6f43a5496047068dca5949cb330f1f153b78905a4d2c96cbc469bf11c684faa33ea3ba4d6d9b4700b29629038035
-
Filesize
12KB
MD5ba25c6e381b8505fc3a820643867c512
SHA1dfa95e7de702b4811875c023100a98cdd4860b5e
SHA25666bf62b0dd51c10800d04ff1ea4ad0f3b6825842c778ad98fd009a23a9ec342b
SHA512016ccfe8f9d08373dc2dea8294db3fceedeed0451d74c204e003d0740dd53f8f977305074d270fa913b5987b5e08016dff9f5f3ce085818c848e7e523f84780b
-
Filesize
116KB
MD541b11e9f6c711f46be035c2bd17a2f68
SHA170869b1b72914cdcff9a65e86a132c9b8c0124c8
SHA2562c88907baae97ef8cdf580a43756e8442519c3456b6e6523a81a237b2685302f
SHA5127b84c4778521c76f7248155f598f2630156bf6f32009e734f29ec3de305b6f68a846e9d9b1c513d48e59ab9e4435e7e6bf9bd2fb26e3e4163c3d9067ed79bbb9
-
Filesize
32KB
MD5b2d4e8139acdf82d017e6ad9df333ad2
SHA1e5ec779c9774c5adb23fa1f90aaf1f7074fa92f3
SHA256c62aa48f1cd40c6d272b632580f1a62dfbef1a53ac20f911e84473e6a80e911e
SHA5122c6d6833ce6ba159f82a46794c5680f0234ab5ad86ee9ae9a24cf44b711898090192c15e5f42eeaa5da6aed638aa7c10134ae5d72dc2da92e81a5e4ea52fd359
-
Filesize
16KB
MD52e3c166e6ca4175956a592fea4bd93ab
SHA1a85481aae540685c5261a8a423949da8d82bf0a2
SHA256a9463dd8cc702bb01b4d5c59167cedfd1f4a6096c31acddd32e6b6591c403a14
SHA512175f72b44095dee29694ed83b7ee72f05d16f1e3906ca689206f21609a9d9c73e6864fd1298fc847a65f88e7152343bf5fbb7bcdcd1efba570d53ef6fd67108b
-
Filesize
108KB
MD5de4ef3d7e731b05466eff87035d6f2f5
SHA1d55622c3213b866807845e81d9f1887b50c35982
SHA2568fc8a7f08a804163280a6e1e0eae1fa03629cfaf11a8494bf77af90b660a2f5e
SHA5125dbbeec9163360bc715244caaa100302ef4c4e986d692dc0089e8a2c013e07d72cf5ad18b4a034ef84d816c564b7d24315399919ef97a515cdc5d4858276ea5a
-
Filesize
325KB
MD55cb88f44f52c7566be250a4d910a665d
SHA1e5e56f6b64be4065a4bbe14e73780a99fa3dee63
SHA2565ecdee26d6397d9d3b3570d3dfe8d518bd2963e5cf4ec198787e929763c03d4f
SHA512221f93b400ae3c2127e1b256bb8ee12cad4977a1d42f85fc2ffa5819d373620853df56917082f00ada41d898031699d6fb7c984a4b7a56abd33eb395b1783535
-
Filesize
277KB
MD5a961f1c648d37b055ab07e9f4b686981
SHA15f4fd9b3039b8dcd10559fed6c94d719c9ebffcf
SHA25632aa1d05f49664974b091d2222a3be90f1a6402c04e328b9bdff366a4bba33a8
SHA512aa5a26bd2ed210393f6006a1ebb376668b23e176227f65170dfceb48980e2d0bbe82e927bad0ab335bf343dac853578307e45a91463587754a210d689b0e806b
-
Filesize
12KB
MD517733ae0e5083f6f617e181f1f0475f7
SHA1af0302369851d8610b7f15086d9685c2ecb3b5b8
SHA2562837d42a217d5c4452f8ca7101f9c13fabaf11d670dc3b68f11b17724ceb6106
SHA5123a6cc78657e9d22fc9220598445e48b01aae0eaafba24e50c794e0c3b491df679b49fa365963dc65a1a5f1febc80a0d6f941801cb4487f24c9d47ce470c1b5d8
-
Filesize
227B
MD5be2aa6d88e303e79e8c85249f6d789c5
SHA176724812986cc9e68ff5699fa6f0aca1de8dc90d
SHA256ab370229e51cd2ad14acd7695e24b05acc356d79405c838d56a08fdca035f587
SHA51216cc67fec83ce78e744e95d91c5e65a90dab16644f70d571f47e34e00c70178dd91ae3e51e9238207032330e0180a008b6375498b2f66b874285b757dfd39dd9
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5051ee727cdd5900f9e85c93f53cf3f27
SHA1e8217e5a8ef46ac6704bd92dcddc12df6c69f8af
SHA25652b856bdf7784371f5846dc7bca9981905bc48aaf1c33fd1e72a6aeb7cdf35bf
SHA512154426ec377987c1e820bb0a914cf97348568a878cc53ebecff62db66348505775d39018ebdcaadafd097cbf4dba8f6f2b0eebd78cc7c2c89ada645036fc7983
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5eeb0fc9151ec14710e0e8fea520d6fbd
SHA11ae79d43abd7068110e89997470a947ac80d4a42
SHA256c75cbad6dc86a69ace532bf26c823430fadc467c5cc372176af8981f6d2f3bd0
SHA512d371e0d13450f75a80d301d959f0ba4ac325015e171502bef4f02e09764503524e7e17405f159e953164c2ace1208224c03ec225abe93a29a9faabeb4f37901a
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize24KB
MD561ad9ea7a735762cae314bfe9123deea
SHA19cd1f85f37e00162bdfe23e31d58a243336c3b22
SHA2560f3adfcfc57ff39b2957e91f4e4e995092f6c6362ee2fbfb4dda5fa2150e0f49
SHA512cbce154e5e522397a0ea59259fe9bb3489f7f072a18855291bfd9469ff994903a118e581f95c6eb76ba04629d0a20a0413beba8f02eb142fdf2491f0f8b206e1
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD54ca4df4de9ce8c2eae188cbe6d05aaae
SHA1bba15fe36844b66616de17310f7e34321c12ab4d
SHA2561aa47191c401fd3030655d515ba9c70aa45de9b35e056d558d168adb2dede929
SHA5127ec51ee356552620daef3d234f5933ffe3db406304c99bd9d40e01323b08128a21084673e95fd81dad48daac627eaec8ece64bdeb10524a3b9b66c71574c3087
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5193256af012de28ba919e4adeb93a8d2
SHA1cdcb6cf3c7539f25aea3a9d8d823ff4374cfb8a5
SHA25687afb37231938d793da7a1f19145c96ddd1b0f6a346360d9fa4eba76a4d28383
SHA512e5703a90986cf4747498730201723c3c7f7a258bc026d6fc5c5b05e3dfa9e53062567a593f866c6485faf89ee8b53ceb076d044a0600930f8b7e9e6ccfd1f209
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD53000568458bb677ffd58a684a2d509c0
SHA1551f3688bc61b73079469e37a8db2c5fcf002dfc
SHA256fbb46cc450d871882cf0f08f6938e6848aab036c9bc563f41e76244c9b0bb06c
SHA512fe84c60646c70ad29a42b101ef3487412005ec0f60348207420014dcb4d547a8fcc05b87cda019040bee54c6a8aa559c514b05fe9217aaa21645caf76987510c
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD50621285fef30612fadb62f79863c9eb4
SHA129e8e8945366ef99aabac73a67de70eb8dff5c69
SHA256167fb61e6f297e7e7f77cc4ee281d939b4145634f76c662ac3fc1a5bddc38eab
SHA5122f1ab0cbdebecb83f45464f73fd0d3220e123ba13aaf564f6ae35d7ead77fb1fac5d11c9d2ed67f290389a220fd8f7c2644d6efb36895cf7caab2d6080391ffa
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5692912d306aac84ea3b194517b6595a6
SHA1a71588c5d3e978e801cfa93c51b746ac486deb8e
SHA25683732b14c1fedae8b795f0932af0fb7f2342ed6c27c0667b12f836caffc20565
SHA51224408ad67a22830148cddf211bbd2e4292c464d4d4fe4d702433c20c42e65040b57a81632439eb4cd714b092da110e28a7bfa26011a7834e4bda59e8aa502705
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD550ec4ac94950a83556e7dfdbacfd2d3b
SHA1cc6d4a8e18fc202760a518f24005a87fa9e22d07
SHA256787d522421dae9ed46d69e4cfb41067de46bbea6ca4a7ad49446852f1be7bd4d
SHA512a97d2c0b8767cc093a2ac24e5b8c8813650ef6195455b046a36e3725b4031a0dd7bc5b6c1dcf236cff44b17096e9a9689b0c232875d7d3fd863bedd21c66bf6c
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD527b2029e3244cb6e655b9d84e553a159
SHA10ff3a130e18b94f139e7c0e1826c4fa53894f3d6
SHA2568564e4c24ea6693160739815d29e54757c4cf67c76d168e14fe3b1eed7627fb4
SHA51227d33748a858f5427867220bd484412fbe0dfaa5b356d2e3a7a77d86f1271843f2b17b0171dfc83ab7aa0c8750493bf6e99ab7a418a6d7047e8bc23d9a34034f
-
Filesize
20KB
MD5a8f263cc1c08f671533bf2ddafa702f7
SHA1b44142eb52e91554a124e091e428dab692c16fc0
SHA2567fa2e705550c7e68ec3a1ac7a9e15e9d77b51c3183a56193cd426532aab54d0e
SHA512ad8a09e7bef8511e3799c4df3baea8fa5d5d72791283c4fcc3bbc1dfc6c29effd1735440c8332857062ddb6951df2db26752d4cfbe389e761b7daf56d63bf04e
-
Filesize
48KB
MD5f925dadd0a0880d4fd17c4569470c98e
SHA112239befad426f97e12fd9670b8b30b7b05bc603
SHA25693e107994c587b64c63d51c42bd9d8789d782e0df8c6ede5021ae5fb97b3ba49
SHA512b938299bc0197ed7482286b1816d613bcf856e43857539bbf9684149a2922bd0d81c01a365e43be4ffef8efb9b3a9b8a9525362e6285c6a9201f377b817b11f4
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD526c54a51c42c2e9ac6407e23970603ed
SHA1b087207a0351ff208eb7ffbf6e5eab3b95288795
SHA2565c2c5365af3358943180c5976cd1ca372d909aaf72592ae70737a6e2be7e5c9e
SHA5128e6c9ce838aa89375404c2f2108e053347a9ee56e57b779d28f7314cb39f6e5d2887b729c8c4e868dccc0f1f9cd3971e78b1877273e48d824ba6bbe8fe71c6a6
-
Filesize
12KB
MD5804df2bcb13d729da2134b96b08faf88
SHA19f3cf5603bfe0b258a89b1c7e48c347c91bbaf7e
SHA2568b77da9ee01007bd723dae5fbd92d71ae39b103fc0c9dfca4e8fca4895402fa2
SHA512bae1a1571de21af788a750aff7de336e8789d9eb764fec3cb72beecc275984c1592c08d5756a57c12fc1eb3b85c3f10e6f598bb37f5d8a658f0b8cf87314f353
-
Filesize
12KB
MD533cf0ae78a33cad4e22ab767f98bc32d
SHA1fff59b05d91ed639340a4f8eb2896c21fb9a58ea
SHA256fefb87396f9d545670a2a3175974f6293c20ae39105083639856857b3ce8c20b
SHA5125f43ce9091e4baabd2e2dea3b05c182d745ed62ce1a4dd7ed17822574f8b01a3bdfc2f14586c1eaabcf63cc521c71bc5edf5e3e7d757abce2e1f663f91141606
-
Filesize
12KB
MD51126dc2d055dc964a5de494394c5360a
SHA1430f2398640baa9f7879fcb6bdfcc3302d7b2de2
SHA256bf5ee0f2f72178efa327ab9b4e57784cf0b3eb0df4c59f91302af3a9f45eb11b
SHA51250aedc90b21a3622182d4c47c14d63a286b8a4c8ef03386554a5054fe95f4bb8a32bae9387d8898b8aa2d840b02903647bd5ae319d1fbb684373692c12587d14
-
Filesize
8KB
MD5a62daf2470c29db6c115476b6bbc72ec
SHA146f8bf3ca1c31fcba56601fa3701d2edb7b29521
SHA25645cdb79eb4a343cb451a3248071d125643b3cf9885c31c7f7f6665626af7f35f
SHA512c4e423a0572d75da0123267fa5dfcb25f231ad09c085ef96dd4c065dffd0632688398a1c2f12d005eb30dbe17c08682b3da4283c7eebbdccc093cdcd917136a7
-
Filesize
20KB
MD5d82d3c838777527977413716ca30e095
SHA15c4ed6ab615ff83cb24145121004ff29e0a5bec5
SHA25639d7dec82d914d8039e542b489f76f5d8faf98429b26ed11b68e0c16ad45ce13
SHA5121d125402d9f38ca7e0c18f3cc5da450252183b69ea692498ae7591e2dda26b48f344e3f238583375837769a045e1b8555be6303e1c63974e02311d64c6533e1e
-
Filesize
12KB
MD53911cca3c0b7aa52a80cc7b841b7dce2
SHA15b185098224672fe1ad87f861fa0698ffd70ca76
SHA256867715a49c55af80a334fed4eb1c18dc26446005cb5c696a423f3ec3eca57061
SHA512eaaca45fb99a7dca5eb7ea66272399b45cabd08bcee94a5f6aa1bcf458e06285c6ee3dedd77e54db855fcf851eae68a9755f9ac7c372ca051b56f5e98cd2066e