Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
152s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system -
submitted
17/02/2025, 12:46
Behavioral task
behavioral1
Sample
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
-
Size
5.0MB
-
MD5
72ed89bdfccf705155b51f1c14c0aef0
-
SHA1
db81286899fdd7d81ede5f202e8ab24e75855ed6
-
SHA256
47e723b9e0dd52cc893fc5ca075c31b4c9ff0fb1c24d0c9786f885976ae476f1
-
SHA512
39ddde52723c83953c55ff3d539de9118e47c14593d5b26661c4a0c5f982c3e5bb9fa1279d329767dd58d53fb14beefb1574e940cb0b7f293dbb522d66008116
-
SSDEEP
98304:PfEh8RekpJiSqoUNjq0RP88iJGuvWZPtoCtaWlZw5V4pNKmvSqfGJTk/sQSSSj:PcseCiSqxq0RU8iJrvWZPtbpCV43Kisd
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Smsfactory family
-
Checks if the Android device is rooted. 1 TTPs 5 IoCs
ioc Process /sbin/su com.pixel.gun3d.hack /system/bin/su com.pixel.gun3d.hack /system/app/Superuser.apk com.pixel.gun3d.hack:Metrica /sbin/su com.pixel.gun3d.hack:Metrica /system/bin/su com.pixel.gun3d.hack:Metrica -
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.pixel.gun3d.hack Framework service call android.os.IPowerManager.acquireWakeLock com.pixel.gun3d.hack:Metrica -
Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.pixel.gun3d.hack Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.pixel.gun3d.hack:Metrica -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 2 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.pixel.gun3d.hack:Metrica Framework service call android.app.job.IJobScheduler.schedule com.pixel.gun3d.hack -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.pixel.gun3d.hack Framework API call javax.crypto.Cipher.doFinal com.pixel.gun3d.hack:Metrica -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.pixel.gun3d.hack
Processes
-
com.pixel.gun3d.hack1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4794
-
com.pixel.gun3d.hack:Metrica1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4837
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
512B
MD5b09675657c5730586373c0588b07cd59
SHA1d8c47a4ee306943d5bfc9f3fa28f9b109a49ca74
SHA256ef092c749b6c6f68ea4f7a2fe5d27ff07bfb178a69f61444ce7e030abbe523b3
SHA51254608a576c9e8fbcc5de6a5c656c35f081f8c7ec2e0877c5270abf67ade4278d597d13455ab141072435e00a717a211d47d18d8223b684f5e937bc5cad9ece3c
-
Filesize
8KB
MD5342358cd561889f758e7508b5fc8eb17
SHA141a1f8123704f4977f573f55a4d92137e23d5394
SHA2568a70546b83c52aac8107cc5d83035d74b7686072ba5cee60b2a2234cacc338d3
SHA512c24efd8e07dbcc3e8012a205f5894b8972dae0013e17605ccfc1b5bc1492dd3c88d4616cf541404c1d3e22911cbaf8e92c915908d31aabbf5801739345774b0e
-
Filesize
44KB
MD5117ce780bc39a85827d9615aeb004908
SHA1726028bea42b08ff219504dbd4c62aceab29af85
SHA256c939846b112795e53317aaa39b4380af6361bb8a8d548f35dfa935f2d79a7999
SHA512ae781978872e4a7e5473e6d0469ea2a59ed2ea985697f65c0c7f9a146010fa1e451b72dccbf9871bf048b1b34e35e7ab4558b781b56f7ecf038807851bd1b5bd
-
Filesize
34B
MD5e3673428895ebc7d183650d9d9062693
SHA10c4292e3810bffcf452c2064418b7896bab625c4
SHA2567eba8fb7b400e32352412793233830d999908bcd38fcb4055689d9d2e4d5c970
SHA5126e97002bc13a7a662dcaba1e08d41af2a564c7137e612ff4c8c060fc49f62021bb7b72718481c6cf2c04ed9db28987eab3186d3ad0e663c6e7c5a88631023eb4
-
Filesize
8KB
MD5306b8acbf86384814952a6650922f9c3
SHA1c88dac0e42295c7f2d4ed5af468122254ccf8199
SHA256cabc0fe12b7495b828e237828b7d1ee9cdeed6132d999396da009d3043af0af0
SHA512c36ccb13c7805854aadede45afef3b529f02a00218786ba40aafdd013477b47d0f99e5c47080a4da76025c61922797230d8f6350ab0eab2aa9603e8008930bc0
-
Filesize
12KB
MD5ebff5e181c3fa3fd3c6b0d7aef272ca8
SHA1ea1afe5a65bbfb0c2370e5feed0627ce64be4bcb
SHA25660d34c431eb3febb6a66664db7e1d616fbdeceac09bb024b45ce70be0111b9fc
SHA51266ac2ac63226583b642574ebba00770732bc23a2676e41b19fee5abfcaaeea2637133173c956e00eba6e333511fabdbbe4ba4a3d44c2182e95071fa6389d4e9f
-
Filesize
116KB
MD52e61aaba206aa1e5e41ce7d1484c8f5c
SHA196734f53d689d8b66bf602a87007cc1622fad60c
SHA2565548acb1a56986ab509f128ef67676e5fb3ddb3b5179d79861e924d11a8def74
SHA5128cf0db2e67b8b17f804c20ad032bcfa90315f4a0626584c69886216401cba9aab4a54058d9cd8a9c25b5ba2f58ca2eb8f8c85d498ae2ef3f33ea9f8145bdf284
-
Filesize
48KB
MD56e719915bba61ae23231f5a96f13a796
SHA12a6f83d9548b6f710c8199963a8c9b8d69d4754a
SHA256bbeb1510664792f75bea25af7f56b381cd3f2a040eaf8c5f656a4e3f6329de82
SHA512076e8bd3843e40a806fa9a0bb85d8b701244815b7553f59d7ffa3f3ddde8ace372286293d9ca9caf2a9d61f4492343edb3a207bcbf109a466be5ce7022379849
-
Filesize
16KB
MD5b47e1713085ee5a49e39a94f0197c5f7
SHA1d5ca79e5070d45db8001c09cc6f4011550c14319
SHA2567102c1a2a737a5bf074f71babe642e45d50498173d9f7ddd9bfeb4f85e85d526
SHA5124a42c0ae8b6c24a8d087e5370a253f115558dc09508f1727e5c39c03d79fda3d6c2d3611b9120767d6b80c21ba15462840cbba650f3618066c59cab395b75682
-
Filesize
108KB
MD5e096c69fc218d8bad0c02dfc3ced8afd
SHA1d754baa8e80553cd3a3a136699ddf0c61ef17a8e
SHA256441f0b9693d6f24e4c75b39be4fdd7948366383bea29b0816450c4255f2d9851
SHA51263daa5bbc75cc546285c07d31daad9d2d76398f78600828dd5929b0784524e1ab358ae936135e2e81044f635265d48b6465d80df22dee71724a85120c82fda16
-
Filesize
301KB
MD56087a1b3b0c51427fb36223ab51d4db2
SHA14882eeb0e7a4f1090b34341842cac72141930d2b
SHA2565ffc80bd95e0fd38b405cd403a9201ea6178ea5fa2ee2de54e90965cd7541f47
SHA512e8ac8cfeebcdbbfef7f9bfea079a38e8bfadd532b400e44317a7836cfce979347d87d54956d62afc17b62da7430879aa82f50d6febc853b815af8b3d2017680b
-
Filesize
2KB
MD529ebf037a63820e687222516de24610a
SHA11a9da4c50e1445457452e1def14bfabe86fca4b9
SHA2564a4e1ed5ff72a780b70e2f144b799dc52514c30d5fa42c8c87807712a6403b81
SHA5122d29ba6085dee738b5287e0acd5d02e5e970576f2ec6bad349eef5ffc3357d3b5f75fd19b90c1e1062fd35026a4e1f6a679887d5b8469a6cdbbaf79463ec465d
-
Filesize
227B
MD5a72c25d057458ed40b8fc41174c1fce0
SHA1e44f1945363da15250d1e151c94c38fca8ef56b5
SHA256f630ecf1fe5e2b8147386ffa8e77fa786674ac0262c5fccf47320cef6118fca5
SHA51211486eccc224a4547082e3ff8d5d15d80e8b11d2beb9c80bcc306411307a56d0c93fa0043737aa5f0c7ac76608cf63d294df0176e63635f26acc720071c41038
-
Filesize
512B
MD51f52ce0e91f35368c327d13713a69e00
SHA1e8975c22b2d41d03fba62ae2bfbdd6e3570f435d
SHA256efbbec7210037f3d135fa49bcb1933e8693bff63a52c8f206627c8eee9d9c334
SHA512909951a9b1c7a48b7929b7ead6f31d7a1b18d6d76675bfca8cf41f1d13cc748f4b61b4742940ef06448a257b3437dede31c023eb49f2fc4555e5f34a542dadaa
-
Filesize
8KB
MD5799fdbb0659b2501536b07a55cd5d054
SHA1bc376a4d1d429b287b181e6d9a8ae0ea95a1152e
SHA25657ce71b7be0542188ce5d1f2aad7dc10a85d56c31f8f58443cbdb7d744a4346f
SHA512e14689d0d6f43ece432fb04a262a707cf283625c2a802805b8b5c008985deed8a2c8e44bbf3f644097ed910b07f076f609d4d6a9171b75f0415807892f2026f2
-
Filesize
358KB
MD5c89d86182197c775190740742bb692f2
SHA1c6277230d073dd3e7d5bf04627a8fb32c00c7ad6
SHA256036b4ce8ce917dad7db1c4cac56def578a3df974a251b4635c353e9bef097b3b
SHA512529fc8eb7bde4fdf68d07629590e677e1f5c998132ea32f6b5293d41d72a58de1143bb53bb0f44b1f20dd3775652cd9125bcdfe3be73543a26e9904307bef85c
-
Filesize
12KB
MD5b300d962498d0cbedb71dba3a859e3e2
SHA14ed242d3f55d012052ab3d1c9f1d009d16788f10
SHA25613807712928530daf6dee0bf960c42b177a058c64bae4976320454bbf0004a36
SHA512896391349e64fc919625e6435e7398c0daecdbdbc9e994ab20aab0694c6561cc3b0051662342f5a789bb98fa3b0585ab1f172385d09cc994d5c59a7e49a701e8
-
Filesize
24KB
MD5e773dfd5469a041ea12a67a48f8534fd
SHA111f0897ecc35bcf85dd5826a6539eb12f883fb9f
SHA2563a1ceca2584855024b24b4458c68068460036cdad2a8d6706e3af870ea30d1a7
SHA512d123d5ebe1c02bcdcf9cc5779544e3959c965226db7562b9934868aab944d5ead11b078beae07c1a301719692ce28d54a2e4320e0bb182f243b48546bfebfeef
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize36KB
MD5cd09c160d888c8396fe86da699a56f32
SHA1e15854a3869287bc471d78ec8fc10f8197c0f6f3
SHA25625dbc5791cfaa4daa5c274f08f7252756adcddb8afe785a1f98c40f14a199dce
SHA5125e076ea007b1ff0cb87111e04efaf384d5fe9e6dd68546e24b766843a5f3be576798e7d75aa2c8e5a2d5aae63b1725920648232ae153e3efccd142902af32128
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize512B
MD5a05d3e33b69871a9a1664d2b0980aa3a
SHA145774c23600262cf95df5a514635bd8a7c86ceb8
SHA256903bae49380ea0b86e473bd3d388532ec919fc5c48e8c1f6bf638fc50ea6dd26
SHA512280b99bc25cdec9ae79006776b1a24e23e5539b266789996d4c965b5844e322bb17a69e4c65a420ded61c214ac673b7e1c8690867cd70ca3ecf448e3a1eb0954
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD58bc6442d2cfc3a184f895cd4b3b43466
SHA1d933fe28df0afbd0b48321e0a5c202cf874cda6e
SHA25694d423c5626be8ded3c543e3a344f2b55c10f5e18336c3bd93629e24659ba2bb
SHA512065e6856a421d8e21d965541d19824d622fb4f28cb7657996980009baeb0af204057635e7cdda158ef2c42caed6251e3c4ac4918ee5f1aaeae52b50d1c3fb1d7
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD50a737d308757839db843f430495d0140
SHA108724f2d1b97f5c1ed32bb5d244c9fdc68c3c889
SHA256c9205b88991986c024f5f5f20c6c07de291dd7a84610e6857725db658cc25095
SHA512df7e4805208d6e29bda522e5b4d74612cf5711a75ea1170f415df5128d4169c8a185809b06ac85016fdc2819bf18ae094ac8b08c653ec0687f0fa77c83cb6364
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5c52a338c8cf6f3bcfeff6c37f56888ad
SHA13e4eb1b801d378c1d69c9bbc8b0588d6f96fdbd3
SHA256bd1f55992e4be6f1fa61f95cac3234c70a78fb0d13c7e8ace5cf85f7f5ac7c14
SHA512bd1448d4e1ca95c8daeb51eb0d6fb05310a8db556baa4e266507c8b2be77151287c99871850eb682e5633b1bc5c334ae04a7f5aa1e03e65337c9ac02f9a65907
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5932cdc49346021ca75c98f0a4840b4dd
SHA159ed33b32101101fdd98d65f4f74ca64410e5418
SHA2564a038d0d72151526cf4de67bcf566ef70335cd13f33bed831ba575a068e977b9
SHA512d2524e77b229cd0812cf0dbcc84a713fba486831d03a90c9320c757bf59615173af8670af27314209e7977e0881a9cd0be6c86e29d1821109041ab3c03f7f55b
-
/data/user/0/com.pixel.gun3d.hack/no_backup/db_metrica_com.pixel.gun3d.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5ca069cc9606e098a3c7489647d3c7850
SHA1f4f167aaf23dbd3e0b92a44f626ce73dfff30312
SHA256aa86aad42f1846083cf488cb103744dbdc739e539c3b161dc0298f93751f2d34
SHA5120570c0cf8b4f0bcc1048a2ce145f1ca62b58e623daab69d457cfc055c388fd4921a104e2d7685310df17980f3a2785082090c99ca0adb6ffd030019f94ce5fc2
-
Filesize
20KB
MD52542eec47743119706802ead17f4584b
SHA10b0643316fa8e66342ca4769f82f74333d30f55b
SHA2565b99bdbc11ba1283d2fcf61c488105bb9fc96e82402ee4c2b680a4ccdbd45821
SHA512e8d4cd9133425db4d5fd30910851205f35d9674964129ac6ba46cd773815380b8d0e8c51cacd399015e7beee78431d1a3f913f518ec68cc2ea4ae903edd0bd10
-
Filesize
20KB
MD51af300976aa854205044748eaeb61b25
SHA11e10e9092e8d6e86cfa71d38cb3baa0fabe910b7
SHA2563e43ea96d5adc86f405436daf056b9f5eecc6cafeac50a899c57d1d8c48806d8
SHA51257eda187f47192865a71e26dd7613ad21bf676f5a9a5ea5d62be170da29f683adf5da2c0d142c07983266fc8d0fc5968625fa61217e6b8fcf08632905a0d247a
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD5dc738c961c6be0bb98d5054f5a4ad1f6
SHA1dc0db8a4e3bc7662c4e16e3d4ac9e977fc5f361a
SHA2565ca073db7737b230c276ce7bd1ff1189cb7b98c1bda9686847bdffbc10234a4f
SHA51285113d8cb78c60b2f8cd25990e85b89f52ac6bfb78bcb8d5b3489ea6a176acab9f084c3ba2ac037c52f0af89dfcb4d0ec33f41943be26f2339b32fd1daab3d55
-
Filesize
20KB
MD5d01513292b00d626f9632aacfc63c297
SHA167fd408145f8e656d9480976c9ad162ba707b37a
SHA25686f51ba2bf6418ae0e68a632ca8e0cb0a9c59ea2f859725fc10f03c6bbfc12ef
SHA512fd8633d40f6f0e0dddd9a2e91678bb8b1cae1134180a2692d85f8bf1fea15e43d2b2a42c2c204800f474885b0c409f5f7e5c76902ebbee7bb31886c3dba3cfbf
-
Filesize
12KB
MD54fa4e714d8662cf9ec0301907c90b2c7
SHA194e244ecddd38ad39f2dc4fefe87f1b461328c77
SHA25665c1ca4c83eed3fda173016ff7f7a6d9f4ecf0a8746a2dc8c06a4c860ee556c0
SHA512cb902534d76c2364622f2f4a63a8437d75d3d00bcbdf247f444329ab7a5564e3e83d0fd68ee8fd8e0cf726850a18030ea9922568417513542ae66a97da1836d3
-
Filesize
12KB
MD5e1b9cad289aeac9e1741113c8064c513
SHA1aaa4d7f7bba13a3eda224327777250d9735c01e6
SHA25626a89d46330d0a8f02f924df015c139c2c77d95b47d04b2ca422585d6db02f97
SHA512f61280c632760e0fedf165936d2cc9f3622111b9d364ed9536984fce7597d45db0579aa6c0cdd2969380c8fdeb4478146c3e741d0718d95b7e8e89d7b219bbf3
-
Filesize
12KB
MD50cfba4eddd2ab8ca80fc4cf303ca6fce
SHA1d876a53ff388f96d6fe43a3cba9b88a4fbbfc381
SHA256bf5be88d2ab90e8d1f3a665a374d77e8ab2695ceb1c02176d63ad9ffedd75d65
SHA51201832a0ef778db07339af995ab004f7c6d0d042cf62dd4364e1838dbcfeb5fee881bc88ccdeeaa6bde6160b46469c914d235304e0604516be5a78b4f05edcaa3
-
Filesize
12KB
MD55c378575f3ba5c730432586e15e13b9a
SHA1c858a116467f05bbd0426ea13dd82a5f76d0a153
SHA256edacacb2521f1a6e9ccf951e6a57d9c138f65058d09f3f860e19ed0502325bfb
SHA512208db5ac25618360619d5e51bd67b253f68340b5931f217045a1a4391d933af51d26849170570ea2a71024db5753d4fcd196ebea510961f3ff105e6d9ffaca2b
-
Filesize
12KB
MD52013719ed2a376c234c6c34903126cbc
SHA19eb8d6a1a23da5ed85f90ddb36878cc3142af4b5
SHA2564a117c0ebb9ad73ccdd9d4d71954fc7399e1e16744fb3e3bd1eef9382aca8d54
SHA512450b88c289e602688b3cf161d2de59a532a288a87820cf829acfdad19aa560d4d930c3a405c60280b72cfb10597314bdb56baae9388371b1b3599183947046a4
-
Filesize
8KB
MD56742e99582006dfc5c4f3f5cf9f4cbfa
SHA1b90d5c5693fea1697678a407e50bb118b658bdb1
SHA256471d2f24919c5e78b32a1a42b468216fab36dc1e08b51e3ea73faac4dd2c53d3
SHA512145e82b93889797918bd62b18b17948d91c3589fce66fb1b7dec3bc4720069550ca54a4f49e4e6851db4d010d1b5fb4143fc1845d89813892951d187efc4ae01
-
Filesize
20KB
MD5996ffbe587eb3fdbf9b5836e85847ca6
SHA1d790d3a12c7b0a756cb109455fa7ebdcce444a4c
SHA2564662f3f02b8c6611537bdc0c9359edc7ac95136231c97ac3ce4df5c978bde346
SHA5125341f38ac4dec62c21b1b9759379669e150afd324d2d5593660b93b2126060f59f180656d33060cd1d8eb60d97c89f6bebe522cb743dea3c21dd1c3e0df41793