Maybe tracing the hacker by his Google play account would be more effective than tracing it back through bittrex?

I'm not sure if it would lead back to the hacker, but Google must keep some record of who uploaded that dummy app.