f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952

Analysis

max time kernel
13s
max time network
149s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
15/06/2024, 02:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952.apk
Size 4.1MB
Sample240615-c8a1kswhmd
SHA256 f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952
MD5 b96ae1bc59107140e911d3fb3561f9ab
SHA1 f2c6e5d3466424559df6075e39c7698b6b033031
SHA512 0be4d842b89590255be121ffe1438cac5a29eaac1abbe38931b53ea0a30b8076900ccd86938386f5a528d8e9398ced80e6470e0b344afefc3e87a866bf8a9f78
SSDEEP 98304:LloAQeVrmihTeYpxkkAO00jSxe3uvJqaC+bZoiuBVdlqRl1Hvc7Xk:Llee1pTeG7jSxe3uTbZoiUdAR/Hvc70
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:5044

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation28034623552656069tmp

Path /data/data/org.bax.project/files/PersistedInstallation28034623552656069tmp
Size 90B
SHA256 8b064c0100876359d7903bbfbe7e950e3e3e80e3c8c929797d94f7235d240fa2
MD5 a6e9692c80a91288001370ade9f2617a
SHA1 566c696b38feca803c0033a3fe46054e927dd867
SHA512 3a43984374d2d288bd19aac779aadd5b4e89187be419794049dc04a95c3a887c991e1700535f525f20db78409fa362474eec6722c9b50896e8e206b4d8bab28f
MD5 SHA1 SHA512

Submit Download