Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
131s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
11/01/2025, 08:25
Behavioral task
behavioral1
Sample
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Smsfactory family
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
ioc Process /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.IActivityManager.registerReceiver com.kongregate.mobile.bitheroes.google.hack:Metrica -
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5065
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5110
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD55f95caa096ebd3fe93432163e3fd2d34
SHA148c9bba88699f9fbf625d27b189ab4395662ccc2
SHA256c17b0ff6f351266dfc375282c9ee02b8263348390207cec71835d7e0956419e3
SHA512e828b3db8d88c761426eaeb76cf836fb92a1a5063a10ae3ec75425057f7e638a17f698b4fbb8202c17ac767abc60482e7d2f702e0d340dcfa21f0a4c6380e0a2
-
Filesize
8KB
MD5b983173b14b57053ef54d781d23e3879
SHA1c96bbdca852b283c1070f4509062c3b47fefd02c
SHA25677ba9553868def1526ced1771e775da67b20faf03293034fe0ecb1fa1c8b7fed
SHA512daa595bdfa715e23fea3ee59dea39e1573526092a07846097876cf355da8fe8ff377b78d1685a484f9c1f9dd0206aef9c15d137a70b5f1c0d24c6fe409172786
-
Filesize
512B
MD5e537b73ebec8a2111ee7556a3985393d
SHA1b50f3f0083521b06afb0df4dacefdc3827824f14
SHA2567bcd16ffa3b3e2e4eb067fd8d04868d565a88ed3337d349fdecb7f295c9de130
SHA512771fd650cfb119bc4eb1af8814ab18c1180b522bedda5adccdcb827aa805afd6b1821f15a88c29ff25229f45a93096aa6e7fbcb9adf2740b38e7ba4d40f895ae
-
Filesize
8KB
MD5fa9d5a3fa1ba383d1c9c8dadb9d82c96
SHA1eae8c9b802c91ff85f2d66a77bdb646e5f6eb10d
SHA25637949ee8c47deabee99da2d76fa12d93e1fc3b0b83158e12f0451b1b286892bf
SHA512b011b53a0214ade6bceafc17b10bdb2e23399731d60204dada04d394a6fc64606f317d8cbd341bcb036be70ae645b26ceb1e49730d092b3506faae9fec24f0d4
-
Filesize
512B
MD591dcb12ab3e842846fe3c549408e08e8
SHA103a3d51e3cdb4aa6025e5b4ad35318b6894a858f
SHA25620b3a604d304eef46a2a0c9b56b612d830d996dc952442e2eee16025f0cea66d
SHA512c651b4ad4d43b452bd279772fedd664a561176891aa48dcc2ae0ad65d9c0cb5db8b7daebb2526f0627c577812ea6f33e141e2dc664b338958a9ee2626f929e65
-
Filesize
20KB
MD5a1a963896f0038cfe7c1b2a8171277f1
SHA1bc2e5c7d0400e6d2726d5a76003ffd13b5f069eb
SHA256b86d45e9963d14c5970333e7edef11ea08650bd1d73c41845140b9c8848d71ac
SHA512198f346836d44e72cbb5099ac2b3a6568d07ba14104d075be1ed7a6c3a5f539fd4f4b40c23de0a7a4b0d6c9154d832384be03d93fd51cacaea531e9669fa350b
-
Filesize
20KB
MD5fb0f11b3e9f28373d4d85102ebca5f85
SHA18a0edfdb0705b760066d6602caed50ba5e8fab51
SHA2566c51b6cf25ef96e060b5a3a39bd5411c5d41d45e12557e217702760e14ebb465
SHA5126a314d1fa38bb747ae6cf7c49c94224fcd07b769e3fb6868d653803c1dfc50df8b0185c53347d16ff785df925e0cc4549c6cb84817972ddbd651b61abf3383a3
-
Filesize
12KB
MD528473ae44300ce5976d07f3abcc9e8e8
SHA15e4a631ade93a535641a0467375b4243f45d1d01
SHA25686d5506cd8075b8206f57397830711732e8f194909b63edd072136ef53cec9e9
SHA512f01476b72164e0018fd63bad11dba65682d6570a13e038489120acd4590f8480062dddd29f1fb3e834586650d53d24c2aeec4e948406b3134100970fa0a67878
-
Filesize
116KB
MD5af3d09cc0ed2c4b98c93f2df7682dd53
SHA18079a5f357cbaa12cd1ac32cd4571944943028cb
SHA256e511373571bd75bd947c5f1139698b4519005cbce399af197435d09d16222c6c
SHA512e705a2b18229ddb1b1497029f3b3b286e0b3d0513478aedbf62afd96d4955b1555085144161ed760fb4dc6dcbb6865045bdc6dd488025cf1bdaca8d770893299
-
Filesize
44KB
MD5188e7350564be0eec2c7bd5f85f49b12
SHA1ee4c940dfe42e9350d7aca002be14ba5aa7fb753
SHA256f170ffd294a88227e6f13c4d9c8f66d28ccae24c00e79add3b7b9c84cb273261
SHA5124411a2a95906e0c565e5655a48152a6aa2dc5f62325cf727b444519045d6820fe44955006dce66c0f4fb6c2b0a95aab828f720302f24ca1d03b99bdb144f0597
-
Filesize
16KB
MD5ad97c1f4f73c06685aeec3602ee858dd
SHA1ff4c8b28fcdf6733867b8548ee6ccebc3d6f018a
SHA256da110ed64c09bc262b479c8b078934e97e32e325677f65831867967791995fd0
SHA51217997ce0e60708754a230d2af3ff55c3437962418702965a41326e6259cbf55f87483675dfd3ab82bfddaa0521ef2619e747334ab24abc3432df2ad2e0f6710a
-
Filesize
108KB
MD58b4536077a8e7f1430cb5497163291a6
SHA1477229208895d6adfb31959a2e8d5b937a302cbe
SHA2567bc5a41eb2bbf250fe3ade9f22ff752ec23b26a97b47ea3d6814a368114ba2e5
SHA512a7246f8cd29db8d1b10487b437ff7e88db7c646d90b32eea605718c6d99a2580dab3f96ecc8650d68f2bdb09f3594f63ef72872f7c082ccf0b8c5ed0f3bb80b7
-
Filesize
366KB
MD590dcb5dc5a3d38997511422f7328cc6f
SHA1bc32478992206ff47cbe94d3d629c652f86c34b5
SHA25601d68fec4d4d9b98335cc22554b6e033ebc54f18e53c51d152a5de2cb2c03baa
SHA5128cb01d61b03ee5ee0ec36020ea0b6fd0cd7ecd65e016e3bd368ee1bba8e85ed6103701e3fac1c587dff8084e654450fb6a7af283940872824b1369a6c1899282
-
Filesize
309KB
MD5637f66226f01a096bdbd587cfed3a7a1
SHA1f5b39a26acf020c9c807d0f0dca5337a015e05db
SHA25695cbc99e4fc67a63581a91a500a6b9275edc450f879de914d4c30da5324d18b2
SHA51294d1c1af8258096fc79118faf92de7d0bcdc16fc165c0c90a44dac63b4fb0bc39f53547556d4516ebf28697d4d125e5f61d68065647c4730e4d16b4c0bb60c3f
-
Filesize
12KB
MD5e7886e93150038c05abf69afb1a2ba05
SHA1f2a8878bf8e614b76dadfde04cc981a01fa04cbd
SHA2565154abb461266df46ce1806679fae0a47e3e84532f0b79d9f0304558e3ab2580
SHA5124a165851df99a504e7550520bf1f608c2e1df630c9e68f460127808b54b0a59ea4be8501df03da3d236e4347c09abd1f50ee24d7ce2d6df3978004a0ec8b8c5e
-
Filesize
20KB
MD5449eb7ed9933b27a9e8cfd085aa9ac8b
SHA16107d7243592792332c89d9ddfa6bc01f7a81f2d
SHA2564fae06d4cb2e87a09eb71d51a943f0e0594651dd82243ebc6dd7f5cc16ce412c
SHA512566a498eff21210274989899c2565d54408daa3a8e190c57391aa839a42a84b5c8fb0784f1a643bc39b655f547726d0ef84d5f847aac10bd429422548ef33e83
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize512B
MD51ba6e6d2905845715216f13a71f4c867
SHA177d67b6c7678400311a18938c67c363a5e8def23
SHA256188ca3b60f3292ea5dde44d189c17c801e43320aad099de7cb0ecca11912b97a
SHA512887151192425c5e7a9af559c660e979bd3bfe1a5c7321ffcf0b6b9061b86889f11c6e6f0f97b25d57a2738cc4b8f3a46cfb1f9d1a7dfbd4763e623f68e5fe63b
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD5cda792f324d3ab62ed3985fba8fd1f69
SHA18493a2b5b05744eadbdf51f234022dbd0f039b26
SHA256beb9b86d7cc1520db33d7d0ef176ffb487cbc939bd5d5064c67b25ac70165709
SHA5126186522c622443ab66c9c2ed3bcecb7052b6b04851f66de75469929d55bfb1c2f769fa69505aa66d6d298637e8d822f9100d7018a7841f0eb851c0c2afc247d7
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize12KB
MD5665590bb1712eddb16c90ace3f6ad424
SHA1d8dd0f40362c2ede4d9518010cff1be44fc055de
SHA256e5fdb3f8131ad2479b7db65f9e135558d839f50c67f614b2bc6f873a3f7833e9
SHA5122fe981bf4453eab217a80d85690c6e3fc90dbec15fddc678e6aeadfa294458e1bd82d1b7b2768881a44e06fb8376e5d7e4b0761cb4b144af8c4811ea5ecac7e2
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD50b2d01bd2351e1bd104d60b0395686ff
SHA12731f46d7b0a1e43471464014ab8f126d978fb08
SHA256351fdb37753403ffd48e2581a45ee8623bac1f7ca35943e05be37837c57c7933
SHA512a5f819c934e8bcc0c3c862dd7785a27935d6fb95e5939403db3c5e80fc278d150bf136f26336dfa81093ef138fa23ff97c949fdcfad487da99d6323611ecff4e
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD55b43124408c536f3bf994911cca0cc57
SHA19a1213b270d670174a60b81b1b6867e6144bb60e
SHA2563f874301716ff90c06f27c2401da9d81e8bbb949a1654ef48e47a51e9921bbe7
SHA512fd933a5640e7ae34c8754640d7ad248609cdf79147845dbd04d9beeab390f65b1fb94a2754a91f4cf3b9b67e77253954681f723dc5b92ad4e262c8bfabb9e72c
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD58f60fb09cabffb6e0bf9cc6770eedf3e
SHA1b8f7d40606572676eebf3870d2362425f50ea033
SHA2563c76eaf10c4c5e534d6ea4d1440300ae001634bbc7e242ff479a7ee9ed6f8458
SHA5123e3e4c7975d7d9deb244d10e798dd0c8ca14c1b02985a72fbd52915661ecb699befa187378383964d76d5cb05fdce2987af45bc45e86d6b9c5b2e9fd3c0ebff8
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5693cf8d53ce29d84db346e8343ec9efa
SHA121abb48795cafc257f4f04ded6a4dc884c67793b
SHA25645c0aad7dadd14c544183ac6be117deb545582cbca4a422187dc25f3e2dfcc4b
SHA512b74bf2bb813c734036c8305b5f64f7e97c39fa18fea444f8fd509b1e813609e875fb6f6e06505d5515341718149778446823536d8ee0d3dd70564d12d9077721
-
/data/data/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5f011809f64ba76d33a27c8c4c997bbf2
SHA1e82f2c90879c1ebef1b7a92db16c910d8dcb309c
SHA25683fae8819c5da58854d805e3f7f8fc21ac969202a2ada8a0cd9c950c2e68810b
SHA512f01741ca650e529d58a260d070931a7fc1aef80e0e9fb51015e60685e6d076de63f08766bec5df69e61a8361ad6f62aa16b7fcaf7fd965b5c4dc1f4ca90bec4d
-
Filesize
20KB
MD57e5e0c2224af4572ae1bc7b48bea83f6
SHA12f99860480815eb040c9826c9d7adaa696118edf
SHA2565ff296a21cc6fa021a1d1b4e784998e20311771f71b066282e84a6e42691b77d
SHA512cbc29dabd68989269cbf2e9e277ba5c3fa333a47b257e3745f9182c269bbdcec4d3bcfcee66a2e0079b874deeb264bb18b3f3c0bcf8f14e0bb739b7adec7c848
-
Filesize
20KB
MD584e6db9792a37ef9eb7d6d0327a3b2f0
SHA18419a086e2d9ff85129904926a141dafa3625528
SHA2568f502058f4e5260fc7ac96d1040112da912c8ac154387ed8fa1210d694dcb75b
SHA5126dac973ee0795b13f0670253f2275bf96e729e1c9c1babb7fb460671b0c605bfd191d8a5c3cd3abdff921da63488312ce9fb9aef9f228d5dcae20f1e3c7b2cf4
-
Filesize
20KB
MD5a0a548793a510f9caed081689f935eeb
SHA12d1aad0213b2b86bfe52dd2485741fb00eb02f3a
SHA2564564ec31a51694e8349f462d5ada137b3f37b7c42515a7fe34ea8ef33b5063c5
SHA512624204c5e505d3f2822a9761109babe81079ce8552551f23b7315baa171ef7881e5b5c4eab607a53b9bf080be6cb3100ff8cedf4cc86fa6218cd18301fcdc367
-
Filesize
20KB
MD53033d91310f6e9b26681eef6f999042f
SHA1eb121b22c9e9a04c90d290311737939d42a00dda
SHA256e910ae9af76413274b90487c200b7b32e53da011a29cba13b935d7ff3bf53690
SHA5127ae8ef0e4f91827bdae6107d78e890f03be2735e0064b4e5021565c23ae8ef0fd16f00198ca53e9da8f0c5e602e5583aa4d004b5febc9c209961de3cf55afe6b
-
Filesize
12KB
MD5678586d88151bfb47b1079792678038a
SHA1d3f40218f53b1166bf5445267127bd17be3ba344
SHA256dba4c2406485a65c2e8b4e54b48498285e23ad9f11684c4a341fa97bf0d9d48a
SHA512a593a5b255db0a1fe1dbc0f9108684881821a127d3f549d5f022b65d29ecd127976d96972109c22633340a8d9fbc5c20c71ffb78488473f59400f078dc71dd92
-
Filesize
512B
MD52f190e56fd0281bb4a8130b8ea868048
SHA17a2ef30044e006d1d0c8c761e7ae274aa2d3fcbf
SHA25677453974328f04bd99549feb91d375f26cad7eb247dd1b0a5e5c711c7f1170b6
SHA5126551eee669fe2ff3b0eaab5caee7478fccbfb80daf5fcc5bc32793ef94bb9b74bb45ccf5a6b50480f6624de1d1dd49a9931fe8cbdc1742cf0cc4dc77fb6f0244
-
Filesize
12KB
MD5088d7b4eb41a6c5f433571f5352d15d9
SHA108155d2d94ba0f1fb21670b09d3a3974a408128f
SHA256776c148e8eda9ed9289b81e1689354fff5f90307a5bd96f1c68efe00e84a3a1f
SHA512b35ce0d0ae5ff87f5a5ddfaa6a490bfa457ed7995c5e4ad57055f0349a9ac40c19d16db10f6aa2cc7c9718f21a1232a6c1e5b7969b7b1409b9ccc3eca28cde9b
-
Filesize
12KB
MD5cf406f79914cde1961741c036713f479
SHA1f920893f66ec6648042124265a24b8f5c34df460
SHA256af00817f0d74cc96de381dd398088ca97bf11046a251545d2e1e1f26d3e13dc3
SHA5126bf8d40debdb326514da0133a25e5212e1f983a3565c5334ff985439e4413b45d99d7e0ac56238aa96ee5ad1e5e9a3424aea455bca28c31f6aef0d4e79391999
-
Filesize
20KB
MD56e0ecd92a3a148438501dd2229af2cc9
SHA11304efa6b5c0d70989fc968f5dc9e43dbd39dba8
SHA2562fbbbd5e4fff3c64bb513a34dc5c5177f413159777cd06e4b010a2cc4251c5e9
SHA512c0d028e9a1d6b40883b4abeeb2bc9c66baf557196b553e4296fa1376378f7d26bb5a14faf516ff9765004840e9279612e47562435ce437fc2b5f8101e55f83de
-
Filesize
44KB
MD5ff080859bf749385eb472cbb698f5f38
SHA1f272dc437272a8b59c16673d673f787c320fbe06
SHA256be5cae7c795bee1381ba8261ead8140df16dda84b7cc36238279ca84d387ce6d
SHA5121fa0975e4c8005c08c6b1c5a3069b649c51503e9e951d1e8c76ca71f598de9430695e9ce57e8e013c3d72adba5b3ef03b1c3c529c515b563fedb2cc7cba8cbea