f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952

Analysis

max time kernel
9s
max time network
147s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
14-06-2024 15:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Application.apk
Size

4.1MB
MD5

b96ae1bc59107140e911d3fb3561f9ab
SHA1

f2c6e5d3466424559df6075e39c7698b6b033031
SHA256

f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952
SHA512

0be4d842b89590255be121ffe1438cac5a29eaac1abbe38931b53ea0a30b8076900ccd86938386f5a528d8e9398ced80e6470e0b344afefc3e87a866bf8a9f78
SSDEEP

98304:LloAQeVrmihTeYpxkkAO00jSxe3uvJqaC+bZoiuBVdlqRl1Hvc7Xk:Llee1pTeG7jSxe3uTbZoiUdAR/Hvc70

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

org.bax.project

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock org.bax.project
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

org.bax.project

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.bax.project
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

org.bax.project

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.bax.project

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:5196

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.bax.project/files/PersistedInstallation4547740205839749353tmp

Filesize
567B

MD5
f64d2eba80b4f6d26f79116ed334cfde

SHA1
194b6edd90d2ef1531a635ff8a2c481e36c062fc

SHA256
428457be1e511532de132e052ed522523e322e44abd79459d4b0ccada53863e6

SHA512
d04523a5ce6871c6170e7be9b341939c5304ce126d6f00a18c3b2bf356aa9518c64cc447648497c2d2334f43243e9b0f6d2d835c92adb3106d28e710f0590ee1

Download Submit
/data/data/org.bax.project/files/PersistedInstallation7778873656208288553tmp

Filesize
90B

MD5
98244f1d36883340a13e5850881fc1f8

SHA1
10b562f9229fefe4a02f08ac2a8f3dd2c5722012

SHA256
8cfab11621216189f551b35691dd6e5e5494a427f321c93cb5b2d6d6603880ff

SHA512
277746e0e84a258296df07c19441782012691a4159b2e07a6f9c92a81a3fa3d449c8ea2890c99d2a08da344ccdf0b1864d97dfefc098b700be8303647f6d6ab2

Download Submit