Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
158s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
10/09/2024, 16:44
Behavioral task
behavioral1
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /sbin/su com.kongregate.mobile.bitheroes.google.hack /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack:Metrica -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5064
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5109
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD500367101d4f5e3e5ede3375e5a0188bb
SHA1ab6e2741d9e535e7d9ffe828678f9cfb8d9d0fd0
SHA256e34697a9fec6b53ab4e48c0261346d9f11ddf912dcb819ba0c79767e5838c62e
SHA51275e4aae7d2386d4f3a603f7a6ad2c9fc7b478815584d0ce2cf18eba842b638a81485a5f99e6dc5e90512f23eac4e5223dbea70e02178ab2a8e32ac0ae3d76f6d
-
Filesize
512B
MD52d9d595d722c15ed345805f273ab8292
SHA12e930e4709db065c127e6b181353254c65bd7839
SHA256a6a4fefbacf6d607b97170a8e817ed43adc8b5a5357c6e97e2404c99e1df9d6f
SHA512b0dbe3223b990e98a07b6db87557e767422bdd70408fab5a41037087113d2566dce2d1ddc6a7c311fecde227305218df6085f87d80d3bd9720a68364a395b9b8
-
Filesize
44KB
MD5982276d068da51e8088a7f04be912bdd
SHA1755f5a6195b7596ca6811186a534b41511567502
SHA256ada49cb2b376499023dae7a8aaa826973cc13bbca4dc360782071ca5e2752050
SHA5123001b41913eea96585f3a23c2bd00b77268c569cd6564a27c32fbcacd3a0ebf24f4f6d7cc5c619896d56efc73c9ba168e15b02bc88ffd29a20dc491acca2b7a9
-
Filesize
512B
MD509f3b5a1a68b785d87b71b1b6ddade53
SHA1153ce329b97178c34678b03ca134713ad074289e
SHA256d7a0b0ae4537e05f608df33ca522d15256f2ff890577cbe250b262258578ea0d
SHA512e3641241800eade2d316f7236c9b4414d99bb460b16c4f8787977b0fc182550e7a2c95c4215e8ad602b1beb7cd00444859e23fa066c2e3925875bf48838afbed
-
Filesize
24KB
MD509fe0d8ce2c306b0620d7ab7f0d84e66
SHA196742168e6bca75b48a66cb24a0f0c61d55f4395
SHA2564f6de7f8c62f26ebd1f58dd62abfcfa0fa7589525604adf4319d10e98d59bba7
SHA51258f6b196a37fc2873782d7aae44c10e0ad831177d41f1bd74b97410658ee090d8e6747d2f302183480e58ad2c3498d2304b588ad332c05deb766a428f1b87e92
-
Filesize
12KB
MD5aae2b598b622ecb8166437907efb9abe
SHA18e2df85eb587195b91aa76adf32b7974fd8167e6
SHA256f8bb6df17833b834d83538d1c1be86f29481dda225c4bc6bbdbed48ca90ff526
SHA5129e1c6dfa52b401629c4851b45e935ef46cc687406f73425c6091d17c5b3fbdb9df550134fc53fd075afcf9257f03137603cdd2df667cf27da9e76eedbfab2930
-
Filesize
12KB
MD54a07a745f9e48e3331b16f560af85018
SHA1748811e15a2798bc6bb6308ada4d0b8071cb70dc
SHA256bb722fe2964e34981e4e26deac62b4049c9b72363274ace7ab248f66ac230ce3
SHA51261d19823d35e13c79cb3b0bc5d803cb7adf653a8fb29e37e4ba2a7297f863beb51d7376f868cb3c0d615581d546fbbca0e3d53e6a3525921cdf09d5765ba3141
-
Filesize
32KB
MD51d6f593b3d0861a64c0d4df724a9085d
SHA1b5bd46b33dd22509fd30c240f85d93b4e4c8f257
SHA25630a9c303f3d53392eea07301122c556aa1d3b8f8204d96be31176801f086dac8
SHA5129148bdb66353c4afb499340d43464e4043dac5e979fa94cac9154cf3af9891daf219c64dd3cb8f8eb220fc5252af2a56417c9d71fed9479a08a2748bcc32dac9
-
Filesize
48KB
MD578d1a0d24bff88072a26ac3f7eea5dfc
SHA1bbae26b6f04788f96c5f3f2be138c2583f81a98a
SHA256ced070a4df56c01cb03e8c3bab3097f6ad31bd324acec0e97d934af779a38827
SHA512602c64f508b89a19ae147fef16b9a4619f5c80c00f66b00141c524e1a0a190fcace61b4a559428df6d5edcc35b1b59270b70025aa308ac69d05367166c7b7d60
-
Filesize
108KB
MD5e020d0c8f414278d494be8f214afcf9b
SHA115bcc9897e37d904eab267aa7c6101b46a7a1534
SHA25686995d3ffabcfc2cbe6fb7c9f6d7ef8e8912f91694b04e667133eba5e4770a64
SHA512bbcb72bc6f741563f2bbec7359bef892d0aee9432c33e31b8cb47646cfe5836c565fd99aafc8dd3706e365326ed6ac766fafeba2080928ecfe189b9cffb3650d
-
Filesize
116KB
MD59bd367ad1eed6ac5d00fb43584ad72ff
SHA181f5459a1cea7e90efde4527dfac1e2c155391d9
SHA25655e20a1ac9af2004ebb7866c97a659cf156bd21e6944dee53730519e4cd6bea0
SHA512f09d1b8d89ee2e9ae44d6b526dc483d265898c4f93308e44da2b4130712e6ddab31f19d9fbda5820f844bf2e2ae973dc09ab0f7b9df5b44058f3b0fbab74a4b8
-
Filesize
342KB
MD59fd515ba51e97c37496baa814af5e40f
SHA1353129013810098d6f6a7d5ff998cf481134c83c
SHA2568124d1c902ee24793bd5d9ac4a5c6b213b9bc64225f2d489402236f99a79b806
SHA51220f83e90c76c69a8b36a2a834ad13ef0d7275c7f04c533bd1365737b8d6dddf5a514ff5d053322fdc24419c6e62f47e7a1f72ea390eca71fb2a15387e161e2f0
-
Filesize
293KB
MD538c0a65e05fa1c884f6f7efefb4be32f
SHA1165e4d1cc76567482f6af2017c5a858c3ce1d363
SHA256a71fdef411f202135c3744179657523d66e21fbbe49f10ff96ff198b457ea35c
SHA512f180b3055e881e2e0a918b15bacfc8ad1a63f155312e4b632a5e8951d421402b99c3c4e18ec41d27b297d7ddd3014e261694066983b465b1f6530496a5742276
-
Filesize
12KB
MD58b38c5a2089ab67f428e7ee2cc3c4a4c
SHA121668023c18439a3a0d6e8a00ec026702dab2485
SHA25645268832a739d55a9c8644c4b6e86c93ebe0d571360c24401ab7e224a19307ad
SHA5128f6bf3a2392c070fff6c934d2f7fdf87421599897804a43366cec1c45c67c42faf32ad90e2b291faeaf3b2b053b0cbf250b5eefa341f3ac955cccd12495b6914
-
Filesize
226B
MD5a974467c1f141f72e284d86e549be591
SHA1402516f162469990c701aeb27efbf8e7c4af9c0b
SHA256099a5b0e4e6a4f0d0c37b5f01337a9789d9b05a7e2e5f8d853cf65d1fa995da7
SHA512562d42fe0bfbd81ef5a39478a20c22ece447a16a28f92a651bb2c45700f1f55d28eda3ca52b0f43fb09c3d8073310c85a91b2a73efdf3822ede3561986d5ea77
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD58555b2bbe3fbf9c15fa2cc49dd02fd07
SHA1cb6c67fd82017d4abe5261115bfddb6ff0f1b5d6
SHA2567b68f2dc9da54ef0f2b9af72addd4704bdb51dc2c50fbd13a616d4837a5efdce
SHA5127b1f141bf17062e98206f21d97cf26bba1d2dfc3b7b3c2266f362244a9f7471309ccc80e7d6af9ba365544a8cb73f2e03fa6f4a93c478cc95a44aa748cea78fb
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize12KB
MD56260d91bc3279107e4c6db4ae5dbaadb
SHA12e04d10b158a8ea842b0ef3827d6de7c2e93882a
SHA256014fdf7300f32fe20164810de4be2b4ef134e33f65e07b1bcbd9f1a44e031b42
SHA5129593afec2d4c5d1ef78eac380d309905651ff97a47c17f1bf181844fb1bce3dcefb93457c6e0b0c239f02a6a5d90d30fbf46b51810d87d71d4391aed94510585
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD583d42484de323e4664972868235dc576
SHA15c97f3b7719e9fb206a06bbed789fa4b82220547
SHA256aa5c284fa51bbfb54f7c5feced6546e1f7e024e66a4e2467d2644f8201f2b07a
SHA512664e74bc64b6bbb3a46aa16d5e5d9a967941efc6ff7d487f8e79298fb6b6426400af1ce86aa47c6543556ef2d26d621b746b94af617cf27550f2ddd5c7fc9be8
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD52acf5c525c1f5ac3e11912c54a6ad85f
SHA183ea79a145e9aa0e09bd46d5ab6343baf95395eb
SHA2568463a03a06ecc9cf1a1b487bac8477f2b6bc754b2c4d675c3e0a41a55c7573fd
SHA51259b99e6e42f04f1c88428fc52f4e4739d4108670afcbc4e7e4e1742c769d92af24b1bd3d9f9316b5380caaec5b6be649f1de9afb569a57d526d319c4b2123764
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5ca251b38c3e2b4a2ad817c20c96ee8b3
SHA131827df3909249bf3a0fb66271e5902426338705
SHA256df8739eab71ea48ee28d22a8e2fe4ad5f2a58c3f16d78dc1651c0535032867fe
SHA5125b26811bf6ccd141a5dd0efba01eaaf145b2dd2e29a93c9c696eceba28770c89676400e56c2fd9c6245502624d373ebfaf4ec096c7127dceb34f30d2f5e11db1
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5ad707dabb5a80057734e541c9d501a05
SHA1b79a63c987ca3b49ea299754908330ad0f9d9db9
SHA25677de34bd6b8576bee6ca2e4660205396ba5cf65b1005133548c86ad291b4c34d
SHA512bdc15b0bf4d85f7d8581ede2a0b8dfa6d0f577329b6f8355f0b758de2136c2bb7d52a2f746b0d7bc20177023b9303a44b50b83b3117c8d6073bfddc6c44795ce
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5e32bf3780493e244efcaacbe3ced5e51
SHA15cf657f7a667ab6e9c9831b0ebf61810f9a4287d
SHA25607718bad7889150ff5338cbb7d6b405884473743226439fa53c06d833f3e67b1
SHA5128cd47488264102a494ec00ba8c49d3badf0c5629b4398de51ba521d2b2ab315e82d7a691b3091642a58caaeb4b922dcdf256289c30fc55a4d8d7e3420784ca63
-
Filesize
20KB
MD5a6966a97d847108160b44800d63f472c
SHA199a6f5df265638b8f9c327db9159ffa95baaf4a8
SHA2564892f8e34262d6fa79c2a219473404729a34a075fff5dea998d22bc39c1ed43b
SHA512fd68d37dd8b5aab919478485bbd446af20edf912cb974829db5908d142b957d26dc08f6134cbf9981e12af963aaefcd651df9bc2212866eddf572afc4a5f1a29
-
Filesize
20KB
MD570bd82245556ac2d752345714742a4ca
SHA18f924a7d4998e36cb0dac1295f470d83dc4f73bf
SHA25607dc04c240d142d0a0f23db38cfd8347a52e3f8b35bd41e3b40e0876615f3351
SHA512db24fd9f0dd8007fbba2fc909bc9cfb950afa15f7565f570618c411439f11bc1c435c946c32355ecd295b5fde649a8410cd63766fefdc448768a1e4581753326
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD599d2cc0283fe3773d0228768de384e7e
SHA124953e16b2f4d3d7234504d873b2a8d39c471b56
SHA2561c6a5e43e72bdb182b7959e6a384ac74e2599d1dacd3d571b3345968c95069b5
SHA5124ca1b3f0e9bc283a182432c4d876b0ac44848a62e05df716dc69d68a059b403ff7a5f1eca166eaecadcb030c001d2cfebe881bd0f84a1f894a37b26bb5b1516b
-
Filesize
20KB
MD5d1ac3c609d59459d2e47191c07277de1
SHA11411de24be8b7a2b5cda504e4e9c7c46618d62fc
SHA2566c2734aa470d5eae2fc72507efbefd7589a8d5f0cac8b1a75101e90ba775119b
SHA512a3af29f65e28e444ac9460f886c1ec34bab96e9b01c4ccdcae04d2aa7fb27a393e312d8c613b2bf2e762772c5a7543e28b65d108ce06c17706de2b6409f06bf0
-
Filesize
12KB
MD59d6271ad7df631119cf3bf2a2fe1243c
SHA185bd07d7b052a8c52d765d28ff8ba703f1980375
SHA256616f9e68f2e209bc0adf28ab190dd76e2d76ab73b3b2af73e53e1a56f00d52a3
SHA51236d748294e138fe6004a56a52becc9105a752660867c27a21ac7b8fda847f3424eb6d0fb72d4c67c3f7dfe7279f223c38855f5dcb5f61a3f630c6fd961b70148
-
Filesize
512B
MD50a6ea9fec1b006ed88dca4aaa3e521f2
SHA18f9ba88b45e61e31aedcf9d7eaac966fd2adca8b
SHA256e4aa4f02f70610b5c58c05f728ca5c21c06b8e3f27e813fb04a5526d747f6961
SHA512af6278d602335adc6ae61af1a91bbcc293a958eef202e75b924a721a31f8ba5f534728fe22e4cbf61b00de71a93186d0bc21d9fac917d4a0be9e84b05be9a3b2
-
Filesize
12KB
MD502007c7147ec9858a6e781eedf11d556
SHA17c27da06673010f7cc602b95b378f175ab867cc0
SHA25637f38b6bbcb98d739bd47637d89b97a5ba41c230542544e26253eefed5cf2225
SHA512450ff8958f4142431215ba89c0e94129de48525f2423aa14d0407448a213ef55a21295983a0121ef65219aa7d117bb643fb68225fe520a9e3e67d4d8c51a80e7
-
Filesize
12KB
MD55ed50f6cae0dd10ae8c88d402e5e499e
SHA1994d0030017fb05eca387161c420f4413544b22c
SHA2568f037a1d42bdef48d3079e3192aaaabff3de7ed5ee684f1705305c97efd4c9e9
SHA512614683d3f1303d5de3f26d96e881d1f6af4f8a05b790c6385b62d76fd5fe64fca1fb83ae06eac10481e9f39ef4be64f19004e03028b01c534f9515635bca1833
-
Filesize
12KB
MD572b124c534c5d91cb3ecd26a3453574f
SHA19dc946368b9d368020e4605f56002458d00f6322
SHA2568063431fefddbc5fb2139c7076d9bf85c8340d3ee0e8e9d17f16d71e9cd4474b
SHA512b06ca8855bc84606f7288d68aeec4dd6559671808d4ea976fb35ecd5b9659a04b6ab9946824caa9d31682cf738d70a5c4d172284d3195e86cb6ee3f9c8461e9b
-
Filesize
20KB
MD570789123de628f73d484a3cd7006aec8
SHA15499ce3a750f0c62790774db21a7afdf1d8c879d
SHA25650e6c23f0696c8eab34ab850ac658387dbe5183b7a5342116f55d64b2d81f697
SHA51240663cf642fc43a9aae8cae9f775c62c5b7faaad919244f84b293a7a58755c906d979b2b4fdb3d21703c7d584cf7aae4207253ed0cc7cae1415956e164713b9e
-
Filesize
12KB
MD5431e0c98c296f15ac87acb4297ada232
SHA1f86778403d39251e65ff3cb1fd13a790df254d00
SHA256496edce26eb8f9928c3d121af8fc840133f71fea291307bc93fd748785846ba8
SHA5122d8c5089b312ae88434d0cf20c8589f86aa8042ec2f22794db7d7f4c106fb12486b90adb3e20873a5a3e702d0dea1b976ad6ec43d2a1e94abd01bafd72fc0ff5