Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
146s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
11/01/2025, 08:25
Behavioral task
behavioral1
Sample
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
JaffaCakes118_fc0f20db5f8098e42d845492fcf3fca4.apk
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Smsfactory family
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /sbin/su com.kongregate.mobile.bitheroes.google.hack /system/bin/su com.kongregate.mobile.bitheroes.google.hack /system/app/Superuser.apk com.kongregate.mobile.bitheroes.google.hack:Metrica /sbin/su com.kongregate.mobile.bitheroes.google.hack:Metrica /system/bin/su com.kongregate.mobile.bitheroes.google.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack Framework service call android.os.IPowerManager.acquireWakeLock com.kongregate.mobile.bitheroes.google.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kongregate.mobile.bitheroes.google.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack Framework service call android.app.job.IJobScheduler.schedule com.kongregate.mobile.bitheroes.google.hack:Metrica -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack Framework API call javax.crypto.Cipher.doFinal com.kongregate.mobile.bitheroes.google.hack:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kongregate.mobile.bitheroes.google.hack
Processes
-
com.kongregate.mobile.bitheroes.google.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4481
-
com.kongregate.mobile.bitheroes.google.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4528
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD56ee3304dfd661f16105e8c11cdf2c876
SHA1d33735f75b37820ebdf743a22069b42e800bd0e0
SHA2567d5cc31d7349c56cdc58dd0a1fb6c6742e2f9ceb1be6a41ca936b5d55c6a30f2
SHA51294d4241d3019e063e7819ccc012afb138dab278b2adce578baa54a8e56afaa1f4122d45644ca774b00ef126c8f71bed11dad808f7c85de5de0ab8399ee85d3a5
-
Filesize
512B
MD558752a24f269afd8b1a7d4e91a680ca3
SHA1a4ee791e5861bcc3e1cd492957d7a916f4155cae
SHA256db10319f15b614200f5f1f36171a5ab3da66478f5ce1e8698005c7a174f7982c
SHA5123d9b40a3ade35850f4dd011d62c855e2f563b502473b18215d3a44d5f774f1b9312e6537faa549b0be5c01a11242d387b1ea6bc6c3c50fa0517aa33960bb08fe
-
Filesize
8KB
MD5737155643197a8be7fc9417cd3d2c536
SHA1cffeb2ad07db5b6803a36f309dee021fa9418f6b
SHA256cdc29d08ba0be6b611fda128550237afb47c1673f13b8179ef9de141e89c15f6
SHA51261f2a9649cf5005cb4f40acccdaddc9720517de98dbeaee0b6ecd8cd51f17c7ae504babe4f520dfbdbba9b10841ee72f2f72cf1c37c6c581f0b05d30ad80136e
-
Filesize
8KB
MD5f773309e20f836adc39f4dd5652f2833
SHA1166e6c37a0c7dbe3c9fab04e5dda657d58ae6171
SHA2560d877c7086a649d3a8e51b85ffa34272e8d2c816c2e77bdc0bdce36adf137cde
SHA512f2cd3f3ee562051d049daa210e68a6640db2604fb3355100be209f9ee901cd419db3e54af8c4ee0f3f8184a5d3ee2b420cb5a38947d5ff34bd623d577c0a7ffa
-
Filesize
36KB
MD507aebc915a5a3e99ac2a0460e5fe4a9c
SHA1e07614a90d073a958c63b91ce59daa8e51ce93a2
SHA25617750cd51f71518dfb31022cc5fb7c1f03714ab374902f6ad953dedbbbe35402
SHA512e2f056bc1d01f7697bc9b143fd04238df67ffa71a962ade4f172327f37c9075596786f2d7cc30ff9ffc943743823eb48fe64e5eb58b6e3a2fb9cee783e0facac
-
Filesize
12KB
MD59450bba364c511b57410f972c4771eb4
SHA1119aaa89d3780be4e7c6de97a1ec00c489dac385
SHA256ff44c9f0724674a6472c00342e936c4a7c9416e05b503f45c416b2a73ad2a87d
SHA5127d54872723a4731a24d19c45749efc393401118311c94759e2b57589748721d6705ee9fc13fe76b12377f5edae35af55e5805c0a954c14946a3c9abf6506afbd
-
Filesize
226B
MD5605dbd1cef62b21b735127e830d18b0d
SHA14f84980fe13ef627f15fb74d94b5aa4588da4c1d
SHA256fe63bc6134cf88a79e8753b34459b2d793af212ffb11cc74b957add695d19fc5
SHA512ec919fbfa4a188b535ce84a8270498418bef300af4ede6c142db9433794482f95c6e32c147caf4430b2609e550614b720ce2fb4655fe44c5bd3995b9b5b9507a
-
Filesize
12KB
MD5fa31fb705c9d1e7aecc22099b148429f
SHA1a4105d565f7a36fd97a29c9c7923b698121c32a8
SHA256f3642ddf352fc358e2682a0b50339a50a45b26b3ef9f64bbd20a83d40854e5e4
SHA5122429f376736c74a90fe5c29e4ca2555aaec1d5464e75d144968784aeb5f6ce1d3b3f32764ebacacef1c36835700fa4a21f725c8c2617295bd505eb052f7dbd5c
-
Filesize
512B
MD57a150dc1b22a22cc76ab1678b63490e9
SHA144108072c068f90c71b2982d2280ecc694b21d0d
SHA2561184cdde8add32905ee1098872204fc2435780cd0d3639da7913fd0f7640a389
SHA512a69715dfe0a7f66c8f6346ad3020f3fc676fd1e2eda1d081813ee65e07d5765885133b59eb11a5d36f75e6fec2c156ed637bcbcdb76bfb99f9a344d6efdda771
-
Filesize
116KB
MD58585d9a8e5360b2bfd520888be6b8b50
SHA1ad04c50bc6479d5bead90bfe64c2c75413776aeb
SHA25681425a155d616b59e3b7d41bcc7a19b940175e4cf039b40c7586f54f3733f233
SHA5128044fee730dc29abaec3b7171341e7ff83959833a0acb238eb31f15c01a5f69c758305f8ce62be88b8d416216f31456a5c7fb31a864769d1b504ff41cfc9f6c0
-
Filesize
16KB
MD589ecfde9486416e5e843a18d7bc543b7
SHA1d9f018583ce992069fed8b3d328dae4ce79899e0
SHA256f9761d8d0ed8b10792ae709006573a0e746c7b3ca5fbfd8a23292644af52b88c
SHA5128dfa4b412c4b84b643499dd4107a97cd37439dd99b8c76b1d99a889c2ff4e4b92cefdab7b46dd4492a1ce9e4998dbadb4340969179a4293d5a8013390c6ba864
-
Filesize
108KB
MD5e7fc63d3eb2c62a66d9c9f4f8774c07f
SHA1863916fb7e200e55173a5e1f5ef0796d1074b412
SHA256dcaa8ab3249557e14574e5ae0aa613e8857db6e482960038d632be3ba602eb25
SHA51284c478b4ec7a2b553262bd8cf8f39fd571977609a3df0d4c582f30868363f6a3029e7dd0bb89cd2d06c77c20de537c210b8b852f34b765eef3bfab3873f9b449
-
Filesize
305KB
MD5c7a3934251554a0ccd29dc211456e14a
SHA118e7bbcfd284910ca46c00cee3ec2892130df944
SHA2565cbb0a497c28e426e3618c48879279b3c64f42a3f902604f2d4ef2b00adab871
SHA512af47187288e169a35e4046a0ee073de205c3ffd160fa95821f943d8348de20c9436217cf44fe4a5bf9287861858a66261f46ce6177d3ff19bab66a8e9d10d947
-
Filesize
257KB
MD585dad17c3cd595e724fbed84883e0361
SHA1f838b895c656102eb29af10719f8e6be69bf7e3e
SHA2560ba4eee3f2d11484d7bb6cb783c842627b73d75d2537368c4fa6a3e5657e1a41
SHA5122ed118228a364aafd18fbba075e5d2640c23df0a4abddb67f8554a96ab0ada1517a97baea34733968568189a609bd350e44a189994e3f2d7c4c8739fd3761218
-
Filesize
8KB
MD55a7816975fcba2624b0897d0162c5be3
SHA17451b9227b2ef5f4e931ac8491fe3b4031597783
SHA25675421496de496c22f34353b875acae52af6a5e6d801cf295ffd4c810c8f254f2
SHA512fe006e196c38be335fc3b66a6ddbf5b98c255602acc37225cc39b605b7acd7d0249e6f7bd479a83bb3f5e8c576677f8640ea4f86e9453edf81ed85d9ca0b9f09
-
Filesize
20KB
MD53c78a881cd613d685d733ae5271354a2
SHA19c236c4c8f69b61561e15c0b08cd4001ff2c58ae
SHA2564ac1e01ff6125de539ec80d21299f8493b5c786d2f0ba77df5aa26c2a982ed18
SHA512f77f712e1f2bd6f0629db64ac3b79f70ed2364286dad716fff5dcde03671bd33fa67b6aceb9bbd5d72a2701f5afaec127b348f9af81dfbd34ea91b111dee7dff
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack
Filesize44KB
MD566caebb40af9f127c716fb6818d711ae
SHA1561b504fb32eba11b4bc063bd63843b8dd955556
SHA256b38bf81a5f2e63c9b3436de3b739756c2332d94c6b6d29ca027dd55dbeffcfb7
SHA512b6044e72979dcd4290195d8241590ed5429b60ae449aab2f493842c9adf4d2fc178b9d6b32736200e5220d6e425d901a8d4bbcfcd169769cc2c92ec791eca5a9
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize8KB
MD57e7ff9fa27868c64f82e2a119289aa89
SHA1cd48cd548c823f318a597697028d4fb8e91551f7
SHA2569091789a3c6be31fe964bd28efeb4b64a9b3ece21dd92e9fa9d0c0fd1c349197
SHA5120875f07f27b29d7384b01aa24950f23de08b2711269fad48520c4839f90de03b4575cee41102e760c3d6463e75b80e4c0c193f45ee46fb549cb89ad923afd6a5
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize12KB
MD53de6a36e05a81048d418fd3000f6b2a1
SHA183230cef4034f2d24021ca05d73b44e7b18ca084
SHA2566a3be7fb59ca42aec501034ebe552b30a672932d3bfb0dbcf13bc28a52facef2
SHA5120a026c3aaad7750416a3034d357e3bbbb90647ea3ad9f2c4a4f937a6ce3245dcce616ba045aac25faf94969cb8cbe21c7dcf52ae0c80cb5d73c8db3782d902de
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack-journal
Filesize20KB
MD582a5e1cd132e618d5b7eee14bda7c947
SHA160a60dae873738292475d3e313ca2c4faaf45941
SHA2568b2cc2cdccdcf67078f7749ecb73fbb3ea058ea3eb9311add5ec3092b2977aac
SHA5126ca230ff7d72a6712cdfaf6aee829c7fbfd497c28b532a3cd874e4708f79e73f93c21b87c74c557d1d4e24c42f4379134397bd8aa0d1091210eafacadfc3bc07
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5a474db440aab6eda9a96678c80de5b1a
SHA14a5f70860d911a1253099fc0f4e3353cc1afa96c
SHA2569fa968b1b4e32e8e0a7320b2ff285cb2e9335eb342a71b9a109ccf9665c3dbcc
SHA5128be097d7163b6344c1777936ce2c89fa75b507de22bad4caff0a61a5de09e398e69a42faadd6d819e0970eb1254a5d78ed489079a095ffbb947a7d8961faa41a
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize20KB
MD5a5ded089d0311c26bdd15e018673f9cd
SHA1eecff256d5bee02c919ea6526e4af8dd2f0987b4
SHA256251da158be2ad76fc76e2ccf863c3ff69f42686979812312100dceaebbfdadc0
SHA512f56059115040679973614ca418cb89c65cef1ba7daedee5c5d3523d5a920fa5b60fab622e3edadea338fa59f8f1162230f559f9e3857871cc9862c473233b77f
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD59f4807f3c0738630a53600db3591812a
SHA1991920211d5dfda03c86bfc3c6401b940ab1373a
SHA256f642570ad886102b5182f31108265c033d32d20c5ebaa860ba776ab752d9cfcc
SHA512437ed8d5065be1910e4be11394c961638411981bdae3786dbfa07d488c66621e28a13704ac7c6aad1c38b43e443b72a3b5f83f9e42b2ec759416954b263b3d59
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5ede8ca1173d1c5b693bdbca9ce271f7e
SHA1241e83058963d707da5d1113ad4eff5d90cf7f44
SHA256348f63eb1492ceec0078da553e92990b7ac3b031ddf4238f08ee4a17ab9fb284
SHA51279c04c5429732622b2afd541c94f24c7d23ad4c208647ecbc952a5b97bee5541acb357b30e13d46d30bd53cc5279ada95888045b3afaa99c1adfd0723475e6d7
-
/data/user/0/com.kongregate.mobile.bitheroes.google.hack/no_backup/db_metrica_com.kongregate.mobile.bitheroes.google.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5813f559310e2067cc4d23d0891ec707b
SHA1f21f0c8917e3a018b4b39e309106fd2370309347
SHA256763d5fd4d59eb83594080a8894e2c8aafea3a6f64923b5451a857c44128b590c
SHA5128ba3c15827c8af471b6e689dacdcf82c49a3e57054c6c34fce5f6aa14d395ecc9c66304beccfa3e34d4eff592fb9f0d793064185cb34cafbda9de800ac5294ce
-
Filesize
20KB
MD5a078edaa5f09e0a53efb8969cf02d600
SHA12f3babdba06d801da0864d192712e2f17f53f3fb
SHA2564d515271e2abf55c2cd2030417d15487a33f50da949989820a5c90c3c1e0e84a
SHA51238e41e897e5928e25e69e9d909b0a0e7770279b418b4451067ebcd1a0ffd9fc72d5884a03d623533ec13582aeb84f7cc954a231c11f0483360b3cfe5f875df5a
-
Filesize
20KB
MD5344b24c061eb2949fd83a94c0a020f8e
SHA18e8b094c0ef76e0b6c387657a7a88fd7646ed011
SHA2564715523e9da6ae5551fbdb7ad5b76524855e2a2ecae3ec4eb7f9ec03af8451be
SHA512642236c6c0491b17a4a97193fd490ba811938dc5dea4fa188329f42e72acf702b23dee664733d2e763542a51a2d3e833cc3d3d2c031b22f825cd4695525bc0c7
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD53cca17eaf8e899d199ccdecd8aeda1e5
SHA16ad1fe7ad3e65bde5998d2b1f14be310e34cda47
SHA2568261bba08c179eb357d280813666804917872bb9554899da22a3859a698bb299
SHA512b714a8f322fdf579c4baa70dbe53c8a54870e8d05a767f267b2ec819d9e50ba705e33758771618fafb65403d93ad6e9e563242345f817a7a07473d21bde0342d
-
Filesize
12KB
MD5e7d5bc68970277b493b4568bbaa76a80
SHA18cf48ffb94b0e149a7548de75e0640805f5aa6b3
SHA2561e8f1a057dbff6306b06d05e86503557dc310993bcc3fd7b7eca891b77026945
SHA512a0b12a09ddbf0c33f0d73e5f6dedcd9623d96bcf70f871c26cc0bc847d594b509fda867fa6aa163031480db6bd2f6928ac3ff44c2074a036719f56042f7c5a7a
-
Filesize
12KB
MD5eaeb108dbb4a4b3599c53d61fd9454eb
SHA192e37bbbba0e086c607e7e55289daa97836d65db
SHA256809608dc4a08e126043f68b6b7ff6745b67d738c23f7fd5bf32bee7537ed88b1
SHA512c0c0281ce0639330897d0ee79d2018e1ed72b96902e5aa1e9d215c1e10d9bbae1ab626a5981f6eb20fd296f68821c55116a04e2a5147f5fa2c372f3e0e3bca12
-
Filesize
512B
MD5ef78ff0943e931482b457ffa9942fbae
SHA1570021d8984a34a4fd3c52a3bc57f1ebf3a43308
SHA2564a4ddbeb2ebb05929172766ff10334ab559c135231b8570b5963fa1617120665
SHA5122fcebc4e532c024e98e7661e63a29c10f93bbfce9eb1471a79d0a4c5a8b7376afabfba00516bc849a539b00f3421978ebcca24d738e9d1818a65218ab0fee577
-
Filesize
12KB
MD5039d2a5d5d87cfb68fe9a30726ae72ab
SHA10206b9ddd204618fd30a7982e6cbb5cdda797618
SHA256bb51f72d0149bb936ad5f0c3d1d9922d59ea799809686bf71828d893d7078028
SHA512bef74b24e1eb74521c3f30791d7abf0b04d61141fa61ed34bca534d25cc85fe2be75293e644748e675f7c5b9020ffdf58a732187a7f7e0fd6896f358b8554c71
-
Filesize
12KB
MD5e8ea36380fa4d2a56a628787359c1364
SHA1c71fe8900c5f5c74b1a1531ea89c057a9ebad3f7
SHA2566ee55d133bb422a8789cb5aefd39e7bdd1c501306f1acced0c57802a6eb662fd
SHA512faa95ef3cdbedc363f59104b58494db9054b88233a4a9c4f6ad6cfeef5fbfdb68519f5335b9eebef361035cb3877041c18c6d3c0bcf4d48d9776cf130cf3b7a9
-
Filesize
20KB
MD54b660f790ded817911d8b214e156db74
SHA1262e2e6383e0b6ab03eb1391eefaab9721051adf
SHA25633c95aef2e3ec7669032a7720778e5337770869cd403e7769ff1dfecf8ada762
SHA512cfd6df0db011be5bf16bbc8a197319927884bd95b0ad9f8fe2e94cc8d4b9fa774d447ff6d60a54e3dfdc1c0af0802513ee3842bc3f67176cea327ef8130a44d8