f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952

Analysis

max time kernel
11s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
14-06-2024 15:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Application.apk
Size

4.1MB
MD5

b96ae1bc59107140e911d3fb3561f9ab
SHA1

f2c6e5d3466424559df6075e39c7698b6b033031
SHA256

f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952
SHA512

0be4d842b89590255be121ffe1438cac5a29eaac1abbe38931b53ea0a30b8076900ccd86938386f5a528d8e9398ced80e6470e0b344afefc3e87a866bf8a9f78
SSDEEP

98304:LloAQeVrmihTeYpxkkAO00jSxe3uvJqaC+bZoiuBVdlqRl1Hvc7Xk:Llee1pTeG7jSxe3uTbZoiUdAR/Hvc70

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

org.bax.project

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock org.bax.project
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

org.bax.project

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo org.bax.project
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

org.bax.project

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.bax.project

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4428

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.bax.project/files/PersistedInstallation1806796682591864662tmp

Filesize
90B

MD5
9092996b2db0290f352971ed86925566

SHA1
0d370d6cfd422a2129fb0e8e4ba8a931ad2e7c36

SHA256
dbb4f71d5622aaecaf51cfed34645ed9a4cf8afe35e1865d38b6c9ed2dd35678

SHA512
8c854501c7972e8d218d4fa431e9951ae071155b69f4c9bd22403bb67dcc4fc0ee33630e2d305e1776dc2e1343179d50d45168aa87d1723c3f56abdd98bbb9dc

Download Submit