67f91c80a902ffd78c3a4224372cd71cb37a2a0e2a48773f8e214d65a95df3f0

Analysis

max time kernel
12s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
16-06-2024 02:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952.apk
Size

4.1MB
MD5

b96ae1bc59107140e911d3fb3561f9ab
SHA1

f2c6e5d3466424559df6075e39c7698b6b033031
SHA256

f8dea4cd9c869a5d35c613f2e0beabbc724fb2d61b4a9909d9b08e26844fc952
SHA512

0be4d842b89590255be121ffe1438cac5a29eaac1abbe38931b53ea0a30b8076900ccd86938386f5a528d8e9398ced80e6470e0b344afefc3e87a866bf8a9f78
SSDEEP

98304:LloAQeVrmihTeYpxkkAO00jSxe3uvJqaC+bZoiuBVdlqRl1Hvc7Xk:Llee1pTeG7jSxe3uTbZoiUdAR/Hvc70

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

org.bax.project

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

org.bax.project

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

org.bax.project

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4179

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.bax.project/files/PersistedInstallation8665662193411072270tmp

Filesize
90B

MD5
27dd75039039b7e1f7ea6194924bd4ee

SHA1
106ff85650ff9b7028b2964c84e1847f4bdfffd6

SHA256
4ed21927527963dac32199051a627a3c1690a2a148a58de0c829b791572df70c

SHA512
88ab8176362ea002aa6a3f3ec5dca3101d0195274edf54f231722d4c3114f1a461a838d92febffe0ac4207347e9f2738818604866362137e5d429754c3a1fab6

Download Submit