f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952

Analysis

max time kernel
11s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
14-06-2024 15:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Application.apk
Size

4.1MB
MD5

b96ae1bc59107140e911d3fb3561f9ab
SHA1

f2c6e5d3466424559df6075e39c7698b6b033031
SHA256

f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952
SHA512

0be4d842b89590255be121ffe1438cac5a29eaac1abbe38931b53ea0a30b8076900ccd86938386f5a528d8e9398ced80e6470e0b344afefc3e87a866bf8a9f78
SSDEEP

98304:LloAQeVrmihTeYpxkkAO00jSxe3uvJqaC+bZoiuBVdlqRl1Hvc7Xk:Llee1pTeG7jSxe3uTbZoiUdAR/Hvc70

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

org.bax.project

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock org.bax.project
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

org.bax.project

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.bax.project
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

org.bax.project

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.bax.project

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4187

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.bax.project/files/PersistedInstallation1767137068211576405tmp

Filesize
90B

MD5
0b7e61d8991bf3fa70bc254ab65cea92

SHA1
b198821dcc9ced5fabb66ff8c074b1a524703427

SHA256
7f70391806833b3294716acbeddfa784edb32610d51bb3a7af2857b6f3837c87

SHA512
d9c712927a1a7bd8f2bd6f4c3bd87113a5a2b95232b90372033a3ffd3c8ce66a839528079ff406c7c7b5baa60244557888b3cf050cc21afab05d786e08d84c31

Download Submit
/data/data/org.bax.project/files/PersistedInstallation904760178353078362tmp

Filesize
567B

MD5
36a0bbfd8789cc9c87c2365b6dbc55dc

SHA1
4497929e4c7c94933a933bd48af2bde8e1fac8a9

SHA256
a4b426975ff4e8864fdae3b306b95ef3eb8cff1230ce509599bf3acb54ae9383

SHA512
7a5e21a8105269d7f8c2d4501ace404a2a522b58bb34c2068a2fc64cacaba48c970e4ed057a6fdf47f4301e08c59d4290090121c33374ddee578ef03add54623

Download Submit