Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    02/04/2024, 10:20 UTC

General

  • Target

    ced34d0e01d14ff89b0fe1392ec7880046f39d3998a4266f075208d67cf043d3.apk

  • Size

    3.1MB

  • MD5

    8522dcb54072b9072fbdb5831969468e

  • SHA1

    a76fe16d5d208f68039e472fccd69481bc6a3a05

  • SHA256

    ced34d0e01d14ff89b0fe1392ec7880046f39d3998a4266f075208d67cf043d3

  • SHA512

    ce4db7cba44968caf8501c80265256ec2e4f7919c7fbd8338bc54eed1619eca47063d7d2ac06a762be567649d0324be3941d2b93f71c999de06a7eebeaf92641

  • SSDEEP

    98304:j7J+xkkmXcxu6ZdRDRTLOJ+6mGpAVv/A/Kgng:j7J+xaMw6ZdRDRTizmKc/Azng

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • org.bax.project
    1⤵
    • Acquires the wake lock
    PID:5035

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    216.58.201.104
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    172.217.16.238
  • flag-us
    DNS
    www.google.com
    Remote address:
    1.1.1.1:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    142.250.179.228
  • 216.58.201.104:443
    ssl.google-analytics.com
    tls
    1.3kB
    6.1kB
    9
    9
  • 142.250.178.14:443
    tls, https
    1.2kB
    40 B
    1
    1
  • 172.217.16.238:443
    android.apis.google.com
    tls
    6.9kB
    11.1kB
    18
    30
  • 216.58.204.68:443
    tls, https
    455 B
    40 B
    2
    1
  • 142.250.179.228:443
    www.google.com
    tls
    8.7kB
    8.8kB
    28
    35
  • 172.217.16.238:443
    android.apis.google.com
    tls
    1.8kB
    6.2kB
    8
    10
  • 142.250.187.238:443
    468 B
    9
  • 142.250.200.2:443
    468 B
    9
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    216.58.201.104

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    172.217.16.238

  • 1.1.1.1:53
    www.google.com
    dns
    60 B
    76 B
    1
    1

    DNS Request

    www.google.com

    DNS Response

    142.250.179.228

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/org.bax.project/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    188c0542bc062e48b614e5ca8c1081af

    SHA1

    0eb9b89a5c92957cd1fe748cc063b32853339774

    SHA256

    c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b

    SHA512

    62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

  • /data/data/org.bax.project/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    05a8ca9d0afc7281702931810b0ae451

    SHA1

    8f84086e7f51e6531ca0d007fa213703d5e29055

    SHA256

    ab78afcf4f0b9b76144dff35fed2352150c46f87af7b6b0d3cdf4901e1273068

    SHA512

    712ba95672390574b0792ddfae97d7f2e6d1987f68e2a8a482ebe454857d94cbe2e04cf136de491001c35cb026bd993c58911df8ee793265fc4b312581b1fbb3

  • /data/data/org.bax.project/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    93a78da71bf465f0b947fd0cb78954ee

    SHA1

    fa36831d396886272e4cbc6554d9d5dd09e79afe

    SHA256

    6fbc00d276f3469272ccebb9d8885658196244ba0f6ce151df0627cd4eecf93a

    SHA512

    d0ed5b1c07f6008f605db8d39ad55f64694a8fc2fbdeab7e93cc4ac6d3b034d878cdfb93de94752cb9b187931a6e1d17ec74e3484d2f55bc7429091246f5fba4

  • /data/data/org.bax.project/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ca5b94d5001cc01fcc295da01fab4a5d

    SHA1

    2ce8f185eed3550673d9161bc2e1a2102680ba00

    SHA256

    60f6fa0c6682e4da14a5fe274fb520ce8d6164a9a4b43b70d417879ce3c9a00d

    SHA512

    dcd617a5a9ecdb14a0839adef6e022a119b91c517c6ea7b7f8eeb3d8afe3da09331d76e0635c372b52cfff42492cd46e4b18985572f1d130485ddb67ca18bb76

  • /data/data/org.bax.project/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    03859b47f760856d071a1441eec71dfb

    SHA1

    a273a2e97c054111ef94d45344836751f16b8192

    SHA256

    0b5a31319041832cc8ec80da29e780d050e3434c3a9dfaf0dcd6785ea5edb316

    SHA512

    c69e2d0d91c57100fd280b3511ea8b63deea1ac7f6c677d72dbd42c0b0fbb1018cd33cc551c423a9e2ed0d298ef897e92b407ae4cb15301da9246d17b3a82217

  • /data/data/org.bax.project/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    083201163cf1fb7711b26b87293d5d0a

    SHA1

    c5c0aee287dbd5cafb87d0eabb480bfaa45aa7ff

    SHA256

    9b524dd611f937dff63a64075181fce53f21c903fbc2ba96dd4d901f9d9c07b6

    SHA512

    4f041854ed276b2bc46ecf07a2e12ae471e0c92bf67b105697d60340e5ba736358cc21fa60b820dbdab0591df52a31100b8c185b132b0b71cf281b136d42f482

  • /data/data/org.bax.project/files/PersistedInstallation7897936141346912090tmp

    Filesize

    90B

    MD5

    36f1a4d67dd4c4e44a5c2fd3b868708e

    SHA1

    d0e55455d410ef705cb14c76e2d2f3dabda0d536

    SHA256

    f0ea254dddff14c23d622a62075023e6b95a215d2fc94b696b9161be1a8f240f

    SHA512

    1f46cef0cc7280a5de19dbeb611cbec319de08769ae1f7814e7f928f268d8a2aa768a55a7a35c879a064eee3236630432750ec0912ed6e1b472af35afd0596e8

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.