Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
150s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
10/09/2024, 16:44
Behavioral task
behavioral1
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /sbin/su com.kongregate.mobile.bitheroes.google.hack /system/bin/su com.kongregate.mobile.bitheroes.google.hack /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /system/bin/su com.kongregate.mobile.bitheroes.google.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4501
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4548
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
8KB
MD5fed4b952c850768ee4da3e9c994cad5d
SHA1ec96befebfd335ab0125443b27b21446dc2828bf
SHA2561cef59fb7681e4899fc653e20977e55587194408e0ab785dab176a34dee4622e
SHA51281791ede27ed02aeae05c71462853014e8ae7f8b13ec0d922787e8df6ad0df01d932bf8e176fc49a90db9cfab7641159d2d2c4a0a7c653f8cef3917c87d34e86
-
Filesize
512B
MD511a200e54eeee900df52d3bc27dbc639
SHA102538016f4adc62962008b01c5fe9fd33c048a45
SHA2567eec5917858fc1ebdc4f49b699337e8b2876a6c919c5e3a63ed7b50bc0d34e7c
SHA512cf769d02cd4cadc4a582017f71e68050ccc93487c0480a4d647522e22962d43d8cc4467bd75c9c8c89f80b42f1485d01f5566362a1c938e8be90d54bba2acf94
-
Filesize
44KB
MD56e2054bd39f7c6a60e99f5fe55944cc8
SHA1edc3dc052eca8fb6fe2a4584e5ae55f37397a26a
SHA256aa9826ca1a53d62e08e5849d19b73cf9050766e0a030715b369eaf62919d4516
SHA51273685ab54f7fbb3fa53c851d2d19028350e291fef88eb69e03befba6a4bf0c16146b71491c1970bcfbf5bf5b23af5d6cf0e4dba027bc7e65eaf12afd5e7d7b0a
-
Filesize
24KB
MD5caa97b227f12373fcf0baf9fe0b6b553
SHA1f2596caf8a99814a9436ea998499607a1860af57
SHA256d222cf0d3af42bb27d5ba001204ed791d8b59544fd95fa12603cae8b14b4eb73
SHA5124a37b2f5d66563c35ec80869f0674bf044d71cc657218a1efbe11ede2254b1bb36d3468ad74cddf5d3a7a71914e111a1ff31d8b5772c08fb24c0bab536085d4e
-
Filesize
12KB
MD5f3930fea7254b101d9dc6c3b1fe54092
SHA14c8a4df5b2e6584d46099fc59beb07237b43c56c
SHA256bcff950cf31383cab6d6f486f8c4642c26f78d0ec3bc53774367db09198b4aa7
SHA51242f6ad6200122b7d668f6b6ba5d09ca7ec58816722b0a6e4911da1731d1f2bc25d47af1a811af21ea5736f5600da8fd30612303ac4ae8819df71513b62a3d9bc
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
12KB
MD50f66c204b5120f3e0a73c9ff99e473cb
SHA1fae1e4ab0ab5b29758b3d0a89a7ac94e9d366f52
SHA256381a66d0594ae474a10615f1ebd17d5501c161806044ceb9ae750a266451a33a
SHA51206539dcf2919d7fb0421e192f975f719039e1f098787e75430e722a341a6bc655717dd301f69a2954dc26f3f1e592d5d6d9f58883365f2459eb808b3e0aa358e
-
Filesize
32KB
MD57b09b67a7725d80a07dab55736ce1c40
SHA1e1f3687c3d6a7c5df1d0b0914d022e3ac80678e0
SHA2566540f255dd786bd5564f894e598990e6fd7ba29919370d2c2e0fb686a1d38ce7
SHA512339858b3ad7514c91aefc885c9bc57941cd0f5579da2a34c37c4a3fc0d28e46cbc78ad30b5fdf6149616e18b385f5015f0d048917d0f74fce9efe006ac74e1ec
-
Filesize
116KB
MD51868a24596316e25048e9130c2bc241d
SHA10d12b81e957fc7cbe492bca512c3ab1858319823
SHA25614ff5fb5f7bbd6767a82db85fce57e75ed3790f9e4b21e189c90ed89fb63fef8
SHA512da9bbd671aaf21094c05747559874683f22a6296288e235a1a5966e416c2d778dd1c04d25b6731e295002b83594eefd67ee78deee2714d06b891afea5f352df7
-
Filesize
108KB
MD5c1c7ae268a96edb3ea98a4052147c7eb
SHA107f4b679e283b47cb1ad7aeab0d85348c930e6bd
SHA25613a9021cbe43e72da6a19d4be90e2362c6b2ac91fa4841604fa622da8721e1e6
SHA5120452473060e0041f8daea3232101b24ba1ac3e5454b0d4d45182ea31771241bb6918dcdbad3d27e6648db653869435176bdba63f81c2c43f33233bbe9c5730c9
-
Filesize
301KB
MD51887d04898e12a799be861e3185e9f04
SHA16ac49146520bfc336350df3f846c5da77bf4538b
SHA25686ea473d97cfd0d1549652a68847c9b39005d5ee19abaa81a80a23aeb5c63171
SHA5128abe0be1bc62e2217658ff9f115b7219be7f931188e881fce82d84dc19d364b2d088eb3b3e3fe10a4a5c01b2c1a0a2f9f3c5840331111a6b1e04e9213056738e
-
Filesize
253KB
MD595fb3282f63fa3c9cf9295f535657aa6
SHA19533b0a70cfd3de72651cb1c8cb787002d3c9567
SHA2566588c7e9f5151c5301130daace222470cc5d3eae7fa977fc87a5d96242cb5859
SHA512c6325243ffe0e1e8ff6cec285d9b506b253f089162f81b1f39a00234d971542bea6d53eb574a5d7b5e021b55544d3d08720e7a3f7b96435660f8d97d46e4f70c
-
Filesize
8KB
MD51e044de780380d1cf892dad052d68cd3
SHA1565b7b1696f35a27c6997984b9f11340e895ae95
SHA256b760cca90fbc325c90e03e4154f95dda33ff39fe100f089a6dbd55a7ec7cf313
SHA5125c6bfe6ed1d856290072af00e2e4aa4f14821b3738e4bf9237066ee3b1aca4e52c89509cbc2747abce3ac04f02c31b501eb35d0c3406b433e1a6b6e284700e15
-
Filesize
226B
MD53d87d07ebb259147f3bf0f504765e2e4
SHA17d279c6abf3b1281ef93484ed6fd86769095f57b
SHA256ed8719910aef3d21c1177eadaa70c21c3fcbb001135df5e45407d3aeefb9d379
SHA5121ca8a48b7854fee7a670dffd752f42fa80b64da91927064ce8edd04644af794364775a6f9f88b2d3129650f8389bb62b976e029cc10c122e412759bc3f8b7e21
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize512B
MD583bd6fa0cd60f73a32ddacb00c49d033
SHA1db41eec4db5beb1a3fec02a1f7fb235c9e82ef46
SHA256e6cd9495fb030d397f54a6cf9a6e1f81a31b40ba4eeb0e23da1bddcf0410b7a1
SHA512c0afb98e0116894e7ed68d168cd6c1884453ec81d2bd2cee7813788d40a692e77e12f5678dfd1de94565c188429ef35c32db997af8e41d3d4346b96283a3b66e
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD56814ba8fc1030a5348fb66320203c0bc
SHA1180be930ba2203141c1843f15abcf156d9823a56
SHA256d79f8949ee1145a7be15789a23cb48f2aee9c786fea6442256a97698dbe46ca1
SHA51274bf6a159226cfa0a44c0eaa05b8af9b78f73ffe3533b42fcaefe97648cd78af3a46f4a2f794cc36656eee34c67a25f9420ece54385704839e296a364f61594c
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize12KB
MD50e1f44de42882c3fa331f75fd6b0fe44
SHA187c4920b3976cad0e5e240ca98b581bd3d1f3955
SHA25609a4fecd744b831887fb116fa7d3a19c470ebf92b2eda9483d740353bb406bad
SHA5126222b86f8a4d17f9f25d8138305c469edda3571ec8c11b411ae20408591015f13bc43f8eb1eb278feca17e0822207463eb5f58f5fc3d9400633740711f8beb55
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD528cc7c748ad50750456c2bcf1f859763
SHA1344df81eff0d465f2f3b57b6bc3a33dfb9a875d3
SHA2562095db9de3b931c77a63910a0958eaa21b7a83f31da6a925f44fe88d86383e03
SHA51270260d85c8ba8eb83393f4810a9976722411fe455e5dd1217304451a65d057673ba9971df6ea35e11037d02a5fbb0083c7f2239f317899cd09d4973a4acd774e
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD52ff14e130884c1b4eb619e1ffcd6043f
SHA172ef564bb08074000ceb5bd9c435e5dfaacbfb22
SHA2562b155894ad80849feb334613753aadda31b23648f0a3ea0316df719e907f0245
SHA512560d6c360362d02a333adf9559995efc893db588754724fc504c711fdba3f818eeebf20b1855cfefd6022a2c47ea1102692b158b72398473f0caa2ce6eb34909
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5ebaaa597ef1eace26913f59c2db3f44a
SHA13869093a36d73664d9e339f277ffa94f1e4e1125
SHA2568d698349c46cb03ade084ca6061a570a663030868a4f045e8a2275f856b813a2
SHA512fc811f53cd5fc57c7efeadf832f43851020412164bc8c87826a32c1e131c1bb2f83fdc917fd0e2ea6877a627a0391d523b5f45bbf8e811645ef0bfacbd8476b3
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5acdce6e8497e34addc13a348b7f3d2f3
SHA1e7adeab13b822e883153230fd828a46916a85fea
SHA2562db7106a9b87f618799997aceecb3041af69c9408a8020883b32f755a7cea94c
SHA5127d02bf6efd0a7d6f95bb6f4c2b1bde5672d59bcaa3c1974171b156b2e938976f36aaac06e70a27c2a97b9a69e0735877ab5dea32850de2708a5c02335612aa50
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD549da2393dd9f21825857119c9f795c12
SHA1f8fcd6aa7c93c177e2291ad7c98f2950cd503381
SHA256bf96495cb0915ce58dba375bbae64cb77c95d20699c36b08bdb2e7fb93dff5b8
SHA5127f756bad82ad572dcf35aa750fcb0f9784a9bbe6acc19c14d42654178f58734335fa5a14342ff293fc86981ae7f9dea6e311afbbb1c71c4935978504f79def04
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5e1a50c2abdf0eaf2cebd76cf0c3d6043
SHA14f1c9796bd3fe84536070e0b4c6c7da6d6a176f3
SHA256057159b6636fc6036a39d69a875df375462e655ffc86b4b3df6172a43716f6bd
SHA5121d2a0a66326c03d0b005bf1668e750351dc2eb8b1737c949ce2bf799d05a86fa719f7f11f9a3317a335cf45c2f7e053198590679535c60a3dd8f2517990838fd
-
Filesize
20KB
MD50b1c26c67673b20c12197549fbb1e506
SHA14b5af5c413b71b6d3f104417458096e6311f82a2
SHA2563a6b4260bf254b5f229bc9727389eba59c4ddbb1340a5b4a5e2c779e6ae6b4c6
SHA5123701293bcdc5020e820cc7bd769c8e85d75845fe9e0e27d3c91dccefa0fe5fed1b834a64313e85e0bfd1f4186598b9a4c24d775424661c067f003b8270e10eaf
-
Filesize
20KB
MD51e4d94ab7252bfe639eb945c18c208bf
SHA1900aa8d2dbe5901d6695d565368bdf57990bbe49
SHA2568c916ff6f3a654d7a86518ec3111d01a199f794a120ad7b6597677e6fc94459e
SHA51262f0beee35121a4ecad8dcdf63c9ee49af40ed9b7df03a7c237f6b0e66e934258546f2b500d3fe5a12635cf21e19a35baf139635bf1c789caf78489055f41c4f
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD5091261d43f6d3db9ffcbdf79c9f6d5eb
SHA1e52be2f5de3cf9dba6ffa44f89aa1b5dfa8202b3
SHA2563453ffdd1c5dcbfb38463d80b33b0137f14fcccf6ed4b60a1c49602e9d0b17dc
SHA5122500b7eb0c549a704a43ea7b7854ecc28b2ec576f58af66257bd71ce1eebba699f6561536aa478f5c96364ff025d6fac95e0e46be4df88b66a64288c148f1fca
-
Filesize
12KB
MD5a7bd1731787c05ffd88d2f8e900aaf0e
SHA17d13af6a535b7e99afebc272fca7d01762e23f9e
SHA256a3dd83bc5ac0a2b5b67c72d4609a2f9df3e4001830db80a5e656838abe165bd1
SHA512dc86f27b95ef14c26a95fe9bbdbfe4ff4b424356361ff1bf0e57e5ed1bd7ef40c27054ad7b3469c4ec080ebcf0ccf189b4f8d6abe92dac6a708d1703a75d51f6
-
Filesize
12KB
MD50956288fb6255711af83308801b06fdb
SHA16d9a9156702c331874953e675a2b03b247299467
SHA25615a87c39920a94ccccfd27312232a577fe4a96cbe958ceec89d2b22225d9a1ef
SHA5128fa4b819bdc62da9cc4a82642fc97242445316e60be690f131e8fbd566cdcbb6f60fe7f48f0efddd7f57c4a9906d570d6a7a9e9c76c8ff30fbcfe15f8c44ab9f
-
Filesize
12KB
MD55b40f4e9a2fcf69ad5f0071881b846c6
SHA10c00ce6824e803139090299f8d4859cf225a5237
SHA2565160252da844be9f7dd207d5f01b112a121e553eea080ae530a8c754ec5e0ac7
SHA512ab80fb3ba29a9d15b99fd643bbe5ed795e660b0ddc13579d046736f77dda6599f10bf43b88f3da4da2c820fdfd4bbfe67e2eefe068ca878534256eae25017b15
-
Filesize
8KB
MD535dfbc309cda6098b6179dfed50c5f4b
SHA1efe25cfedf97251b2dcb23cc6bb7af04aa2cb9b6
SHA2560a143a3eb0e3ffa201e1cccc88b841e916209917c49c855f3a7d59470605f36a
SHA512669a643db1aea8a2fdec7280e153f1c04b58618d87889a458a76755bbe32a253664648f2f29de301416017de2f149bf64ca440ee9ee8d7bba62499427f1fae04
-
Filesize
20KB
MD527896717bb3d55c7a19ee0e92543626f
SHA1591f663c1e6a2a38f33dd62a57e5cf41e1cc99e8
SHA2561b6958c5162a70d0dc91335a92d153407622df88584687eca4119f2df505f97a
SHA512f43df1a26f1aa3916af133ab435e7036738f93fb6aeeccad167d921d135e1da03dd68fcb19d898ce40c0f338ecacfb1a61ace730e769b236eee4255c9a5122e9
-
Filesize
12KB
MD5fc6b34c6706f465cc74bb38d4ee6e0c1
SHA15521959dea801c9a8b42e9d00648a59b86ea088e
SHA2565c882699c681aec19c67e826cfb7ac5616e8f94bd3cee81d09b4c0423642818d
SHA512c7d4866516f1cebc23cfde88615c42322aa5f63662b4775175eac663bbaba10601d2fff23673d9fa0952101fb4ecf355f03afc75eafcf9c65770d0b3b653ccba