6ec7c8b2df42b3ea7648cedfd6a59e0d551c2494c3e22336e3ab633d6c53b9e8

Analysis

max time kernel
3s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
20-10-2024 00:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Application.apk
Size

3.1MB
MD5

0fecdca02540dc9b2c6f383e5dc4c99f
SHA1

b551ed242ef33eb7dee7cbed57667d34bad2378d
SHA256

6ec7c8b2df42b3ea7648cedfd6a59e0d551c2494c3e22336e3ab633d6c53b9e8
SHA512

0c39cb57e6dec84c1126ff203f6a7429ae49be5a0e58c48e8fec4a0df4948a9ff7acf445ed39a175981103e30a4505df7756b79e38ca17868a326c97ca87d5e3
SSDEEP

98304:02xkkmX9srj/vp/asvuU2bSoGvngsIWJbXlfZ30K0e6g:04atuj/vpis2fbvgLX3F0Pg

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4253

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.bax.project/files/PersistedInstallation1831472859881189612tmp

Filesize
90B

MD5
3fac6e88408dcc5e13b98465c224e79e

SHA1
78660fcd5df25e3ab0188271d8838cf6c4f053da

SHA256
7da6db81fa68db75da542fb1018a1c1d816114740d041b6c1fa77f7d26be331e

SHA512
47f5f4b2d2008aea0789dd10d69e0030df59372ca9e3e75841711382b966a51b86e46bc2332cff990c939192e58d33d5038e40a6cec1d70ad1556b075e2c26ff

Download Submit