Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    10/09/2024, 09:41

General

  • Target

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk

  • Size

    4.9MB

  • MD5

    fc0f20db5f8098e42d845492fcf3fca4

  • SHA1

    380e9f9d17c1f13e66d367f4f8726200e2dee07c

  • SHA256

    81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19

  • SHA512

    d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1

  • SSDEEP

    98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.kongregate.mobile.bitheroes.google.hack
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4823
  • com.kongregate.mobile.bitheroes.google.hack:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4870

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db

    Filesize

    52KB

    MD5

    212a337771ab5b18e82e4d1b7acdea35

    SHA1

    092a996b96b0dc7006669f4a3dadc94357b25013

    SHA256

    802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417

    SHA512

    988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    8KB

    MD5

    5ef8286489128eed8bd1c2d568bad0bf

    SHA1

    d6e358ef16d40a9205925d0d07bee8809ae786af

    SHA256

    0f401250cca481e59ffc5c1f5e565739ba9d5a45cbe21738e33d2e9336b65f2a

    SHA512

    5dddae2281aac4a69f3c44b701988eb37caa07415fed611b2280be9563fb1148f364aa7ced628a646821e346748d05df60afe113d22f73cc68417789381524ba

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    44KB

    MD5

    f9021edec478fa8c4916cdd1e4706f7f

    SHA1

    b0edacf35140d4bdd3541a5171c11c328f6a0e43

    SHA256

    43968673d3a7afe255aa738533c1273777d331aa742bc5f5d2a8a108b39023d7

    SHA512

    ecb493df794e036cffb34a7f6f01f3c75aff5940a6d2fe51180b1b58f0d6edfefcf8800e15b57072c3efaf4dc5f5b3fffd809e3f88718b0bb730e1feed93afc2

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/databases/OneSignal.db-journal

    Filesize

    8KB

    MD5

    bbb22db2f35c432cf72ec6a9a21026de

    SHA1

    3dd2d4a24904fb698b4248fdcf04f8aa0766767f

    SHA256

    936d0ae646ae13c89509593ff232adf5267c05bf94d29196f55409e69fc901a4

    SHA512

    c82acc235ac7dc3a99c623097d66cf8ea20d6f43a5496047068dca5949cb330f1f153b78905a4d2c96cbc469bf11c684faa33ea3ba4d6d9b4700b29629038035

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb

    Filesize

    12KB

    MD5

    ba25c6e381b8505fc3a820643867c512

    SHA1

    dfa95e7de702b4811875c023100a98cdd4860b5e

    SHA256

    66bf62b0dd51c10800d04ff1ea4ad0f3b6825842c778ad98fd009a23a9ec342b

    SHA512

    016ccfe8f9d08373dc2dea8294db3fceedeed0451d74c204e003d0740dd53f8f977305074d270fa913b5987b5e08016dff9f5f3ce085818c848e7e523f84780b

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-journal

    Filesize

    116KB

    MD5

    41b11e9f6c711f46be035c2bd17a2f68

    SHA1

    70869b1b72914cdcff9a65e86a132c9b8c0124c8

    SHA256

    2c88907baae97ef8cdf580a43756e8442519c3456b6e6523a81a237b2685302f

    SHA512

    7b84c4778521c76f7248155f598f2630156bf6f32009e734f29ec3de305b6f68a846e9d9b1c513d48e59ab9e4435e7e6bf9bd2fb26e3e4163c3d9067ed79bbb9

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    b2d4e8139acdf82d017e6ad9df333ad2

    SHA1

    e5ec779c9774c5adb23fa1f90aaf1f7074fa92f3

    SHA256

    c62aa48f1cd40c6d272b632580f1a62dfbef1a53ac20f911e84473e6a80e911e

    SHA512

    2c6d6833ce6ba159f82a46794c5680f0234ab5ad86ee9ae9a24cf44b711898090192c15e5f42eeaa5da6aed638aa7c10134ae5d72dc2da92e81a5e4ea52fd359

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    2e3c166e6ca4175956a592fea4bd93ab

    SHA1

    a85481aae540685c5261a8a423949da8d82bf0a2

    SHA256

    a9463dd8cc702bb01b4d5c59167cedfd1f4a6096c31acddd32e6b6591c403a14

    SHA512

    175f72b44095dee29694ed83b7ee72f05d16f1e3906ca689206f21609a9d9c73e6864fd1298fc847a65f88e7152343bf5fbb7bcdcd1efba570d53ef6fd67108b

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    de4ef3d7e731b05466eff87035d6f2f5

    SHA1

    d55622c3213b866807845e81d9f1887b50c35982

    SHA256

    8fc8a7f08a804163280a6e1e0eae1fa03629cfaf11a8494bf77af90b660a2f5e

    SHA512

    5dbbeec9163360bc715244caaa100302ef4c4e986d692dc0089e8a2c013e07d72cf5ad18b4a034ef84d816c564b7d24315399919ef97a515cdc5d4858276ea5a

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    325KB

    MD5

    5cb88f44f52c7566be250a4d910a665d

    SHA1

    e5e56f6b64be4065a4bbe14e73780a99fa3dee63

    SHA256

    5ecdee26d6397d9d3b3570d3dfe8d518bd2963e5cf4ec198787e929763c03d4f

    SHA512

    221f93b400ae3c2127e1b256bb8ee12cad4977a1d42f85fc2ffa5819d373620853df56917082f00ada41d898031699d6fb7c984a4b7a56abd33eb395b1783535

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/androidx.work.workdb-wal

    Filesize

    277KB

    MD5

    a961f1c648d37b055ab07e9f4b686981

    SHA1

    5f4fd9b3039b8dcd10559fed6c94d719c9ebffcf

    SHA256

    32aa1d05f49664974b091d2222a3be90f1a6402c04e328b9bdff366a4bba33a8

    SHA512

    aa5a26bd2ed210393f6006a1ebb376668b23e176227f65170dfceb48980e2d0bbe82e927bad0ab335bf343dac853578307e45a91463587754a210d689b0e806b

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/com.google.InstanceId.properties

    Filesize

    12KB

    MD5

    17733ae0e5083f6f617e181f1f0475f7

    SHA1

    af0302369851d8610b7f15086d9685c2ecb3b5b8

    SHA256

    2837d42a217d5c4452f8ca7101f9c13fabaf11d670dc3b68f11b17724ceb6106

    SHA512

    3a6cc78657e9d22fc9220598445e48b01aae0eaafba24e50c794e0c3b491df679b49fa365963dc65a1a5f1febc80a0d6f941801cb4487f24c9d47ce470c1b5d8

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/credentials.dat

    Filesize

    227B

    MD5

    be2aa6d88e303e79e8c85249f6d789c5

    SHA1

    76724812986cc9e68ff5699fa6f0aca1de8dc90d

    SHA256

    ab370229e51cd2ad14acd7695e24b05acc356d79405c838d56a08fdca035f587

    SHA512

    16cc67fec83ce78e744e95d91c5e65a90dab16644f70d571f47e34e00c70178dd91ae3e51e9238207032330e0180a008b6375498b2f66b874285b757dfd39dd9

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    051ee727cdd5900f9e85c93f53cf3f27

    SHA1

    e8217e5a8ef46ac6704bd92dcddc12df6c69f8af

    SHA256

    52b856bdf7784371f5846dc7bca9981905bc48aaf1c33fd1e72a6aeb7cdf35bf

    SHA512

    154426ec377987c1e820bb0a914cf97348568a878cc53ebecff62db66348505775d39018ebdcaadafd097cbf4dba8f6f2b0eebd78cc7c2c89ada645036fc7983

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    8KB

    MD5

    eeb0fc9151ec14710e0e8fea520d6fbd

    SHA1

    1ae79d43abd7068110e89997470a947ac80d4a42

    SHA256

    c75cbad6dc86a69ace532bf26c823430fadc467c5cc372176af8981f6d2f3bd0

    SHA512

    d371e0d13450f75a80d301d959f0ba4ac325015e171502bef4f02e09764503524e7e17405f159e953164c2ace1208224c03ec225abe93a29a9faabeb4f37901a

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal

    Filesize

    24KB

    MD5

    61ad9ea7a735762cae314bfe9123deea

    SHA1

    9cd1f85f37e00162bdfe23e31d58a243336c3b22

    SHA256

    0f3adfcfc57ff39b2957e91f4e4e995092f6c6362ee2fbfb4dda5fa2150e0f49

    SHA512

    cbce154e5e522397a0ea59259fe9bb3489f7f072a18855291bfd9469ff994903a118e581f95c6eb76ba04629d0a20a0413beba8f02eb142fdf2491f0f8b206e1

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180

    Filesize

    36KB

    MD5

    4ca4df4de9ce8c2eae188cbe6d05aaae

    SHA1

    bba15fe36844b66616de17310f7e34321c12ab4d

    SHA256

    1aa47191c401fd3030655d515ba9c70aa45de9b35e056d558d168adb2dede929

    SHA512

    7ec51ee356552620daef3d234f5933ffe3db406304c99bd9d40e01323b08128a21084673e95fd81dad48daac627eaec8ece64bdeb10524a3b9b66c71574c3087

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    20KB

    MD5

    193256af012de28ba919e4adeb93a8d2

    SHA1

    cdcb6cf3c7539f25aea3a9d8d823ff4374cfb8a5

    SHA256

    87afb37231938d793da7a1f19145c96ddd1b0f6a346360d9fa4eba76a4d28383

    SHA512

    e5703a90986cf4747498730201723c3c7f7a258bc026d6fc5c5b05e3dfa9e53062567a593f866c6485faf89ee8b53ceb076d044a0600930f8b7e9e6ccfd1f209

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    8KB

    MD5

    3000568458bb677ffd58a684a2d509c0

    SHA1

    551f3688bc61b73079469e37a8db2c5fcf002dfc

    SHA256

    fbb46cc450d871882cf0f08f6938e6848aab036c9bc563f41e76244c9b0bb06c

    SHA512

    fe84c60646c70ad29a42b101ef3487412005ec0f60348207420014dcb4d547a8fcc05b87cda019040bee54c6a8aa559c514b05fe9217aaa21645caf76987510c

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    8KB

    MD5

    0621285fef30612fadb62f79863c9eb4

    SHA1

    29e8e8945366ef99aabac73a67de70eb8dff5c69

    SHA256

    167fb61e6f297e7e7f77cc4ee281d939b4145634f76c662ac3fc1a5bddc38eab

    SHA512

    2f1ab0cbdebecb83f45464f73fd0d3220e123ba13aaf564f6ae35d7ead77fb1fac5d11c9d2ed67f290389a220fd8f7c2644d6efb36895cf7caab2d6080391ffa

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    692912d306aac84ea3b194517b6595a6

    SHA1

    a71588c5d3e978e801cfa93c51b746ac486deb8e

    SHA256

    83732b14c1fedae8b795f0932af0fb7f2342ed6c27c0667b12f836caffc20565

    SHA512

    24408ad67a22830148cddf211bbd2e4292c464d4d4fe4d702433c20c42e65040b57a81632439eb4cd714b092da110e28a7bfa26011a7834e4bda59e8aa502705

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    8KB

    MD5

    50ec4ac94950a83556e7dfdbacfd2d3b

    SHA1

    cc6d4a8e18fc202760a518f24005a87fa9e22d07

    SHA256

    787d522421dae9ed46d69e4cfb41067de46bbea6ca4a7ad49446852f1be7bd4d

    SHA512

    a97d2c0b8767cc093a2ac24e5b8c8813650ef6195455b046a36e3725b4031a0dd7bc5b6c1dcf236cff44b17096e9a9689b0c232875d7d3fd863bedd21c66bf6c

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    27b2029e3244cb6e655b9d84e553a159

    SHA1

    0ff3a130e18b94f139e7c0e1826c4fa53894f3d6

    SHA256

    8564e4c24ea6693160739815d29e54757c4cf67c76d168e14fe3b1eed7627fb4

    SHA512

    27d33748a858f5427867220bd484412fbe0dfaa5b356d2e3a7a77d86f1271843f2b17b0171dfc83ab7aa0c8750493bf6e99ab7a418a6d7047e8bc23d9a34034f

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    a8f263cc1c08f671533bf2ddafa702f7

    SHA1

    b44142eb52e91554a124e091e428dab692c16fc0

    SHA256

    7fa2e705550c7e68ec3a1ac7a9e15e9d77b51c3183a56193cd426532aab54d0e

    SHA512

    ad8a09e7bef8511e3799c4df3baea8fa5d5d72791283c4fcc3bbc1dfc6c29effd1735440c8332857062ddb6951df2db26752d4cfbe389e761b7daf56d63bf04e

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    48KB

    MD5

    f925dadd0a0880d4fd17c4569470c98e

    SHA1

    12239befad426f97e12fd9670b8b30b7b05bc603

    SHA256

    93e107994c587b64c63d51c42bd9d8789d782e0df8c6ede5021ae5fb97b3ba49

    SHA512

    b938299bc0197ed7482286b1816d613bcf856e43857539bbf9684149a2922bd0d81c01a365e43be4ffef8efb9b3a9b8a9525362e6285c6a9201f377b817b11f4

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    fc318483a677c71a725dbbe6e9516df9

    SHA1

    8ac3af9cbfb464e53b709028d1f64a4d019bb2f4

    SHA256

    d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9

    SHA512

    0e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    26c54a51c42c2e9ac6407e23970603ed

    SHA1

    b087207a0351ff208eb7ffbf6e5eab3b95288795

    SHA256

    5c2c5365af3358943180c5976cd1ca372d909aaf72592ae70737a6e2be7e5c9e

    SHA512

    8e6c9ce838aa89375404c2f2108e053347a9ee56e57b779d28f7314cb39f6e5d2887b729c8c4e868dccc0f1f9cd3971e78b1877273e48d824ba6bbe8fe71c6a6

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    804df2bcb13d729da2134b96b08faf88

    SHA1

    9f3cf5603bfe0b258a89b1c7e48c347c91bbaf7e

    SHA256

    8b77da9ee01007bd723dae5fbd92d71ae39b103fc0c9dfca4e8fca4895402fa2

    SHA512

    bae1a1571de21af788a750aff7de336e8789d9eb764fec3cb72beecc275984c1592c08d5756a57c12fc1eb3b85c3f10e6f598bb37f5d8a658f0b8cf87314f353

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    33cf0ae78a33cad4e22ab767f98bc32d

    SHA1

    fff59b05d91ed639340a4f8eb2896c21fb9a58ea

    SHA256

    fefb87396f9d545670a2a3175974f6293c20ae39105083639856857b3ce8c20b

    SHA512

    5f43ce9091e4baabd2e2dea3b05c182d745ed62ce1a4dd7ed17822574f8b01a3bdfc2f14586c1eaabcf63cc521c71bc5edf5e3e7d757abce2e1f663f91141606

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    1126dc2d055dc964a5de494394c5360a

    SHA1

    430f2398640baa9f7879fcb6bdfcc3302d7b2de2

    SHA256

    bf5ee0f2f72178efa327ab9b4e57784cf0b3eb0df4c59f91302af3a9f45eb11b

    SHA512

    50aedc90b21a3622182d4c47c14d63a286b8a4c8ef03386554a5054fe95f4bb8a32bae9387d8898b8aa2d840b02903647bd5ae319d1fbb684373692c12587d14

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    8KB

    MD5

    a62daf2470c29db6c115476b6bbc72ec

    SHA1

    46f8bf3ca1c31fcba56601fa3701d2edb7b29521

    SHA256

    45cdb79eb4a343cb451a3248071d125643b3cf9885c31c7f7f6665626af7f35f

    SHA512

    c4e423a0572d75da0123267fa5dfcb25f231ad09c085ef96dd4c065dffd0632688398a1c2f12d005eb30dbe17c08682b3da4283c7eebbdccc093cdcd917136a7

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    20KB

    MD5

    d82d3c838777527977413716ca30e095

    SHA1

    5c4ed6ab615ff83cb24145121004ff29e0a5bec5

    SHA256

    39d7dec82d914d8039e542b489f76f5d8faf98429b26ed11b68e0c16ad45ce13

    SHA512

    1d125402d9f38ca7e0c18f3cc5da450252183b69ea692498ae7591e2dda26b48f344e3f238583375837769a045e1b8555be6303e1c63974e02311d64c6533e1e

  • /data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    3911cca3c0b7aa52a80cc7b841b7dce2

    SHA1

    5b185098224672fe1ad87f861fa0698ffd70ca76

    SHA256

    867715a49c55af80a334fed4eb1c18dc26446005cb5c696a423f3ec3eca57061

    SHA512

    eaaca45fb99a7dca5eb7ea66272399b45cabd08bcee94a5f6aa1bcf458e06285c6ee3dedd77e54db855fcf851eae68a9755f9ac7c372ca051b56f5e98cd2066e