6ec7c8b2df42b3ea7648cedfd6a59e0d551c2494c3e22336e3ab633d6c53b9e8 | Triage™

Analysis

max time kernel
5s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
20/10/2024, 00:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Application.apk
Size 3.1MB
Sample241020-aceyjsxbke
SHA256 6ec7c8b2df42b3ea7648cedfd6a59e0d551c2494c3e22336e3ab633d6c53b9e8
MD5 0fecdca02540dc9b2c6f383e5dc4c99f
SHA1 b551ed242ef33eb7dee7cbed57667d34bad2378d
SHA512 0c39cb57e6dec84c1126ff203f6a7429ae49be5a0e58c48e8fec4a0df4948a9ff7acf445ed39a175981103e30a4505df7756b79e38ca17868a326c97ca87d5e3
SSDEEP 98304:02xkkmX9srj/vp/asvuU2bSoGvngsIWJbXlfZ30K0e6g:04atuj/vpis2fbvgLX3F0Pg
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4486

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/org.bax.project/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 2a924d143803c4c618e7d4d5a4f51573de8feaa56771d24acae9ad3688b49002
MD5 8ec151a2681eaebd85faff581f48f1ed
SHA1 fa5f4a960dc6beafd0438804c91f4a8533f42826
SHA512 dcef2df17b950f10e5aa1763fb423b322314c424a682520698f96f06e33bcd6113ca08e3e3fbc2e3f5bab75c1b11fe883ef445c23c4ac04701ca253a27776633
SSDEEP 6:7+/l9mRg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKPK:7+t4qL8EA9zmzrfRmBEyPbGK
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 bdbf0106a22991f9a1708aa9442959e03346faa0f96ad6a772d56883847a28f6
MD5 2751ea60d08a4cf4fc49a7399822cc71
SHA1 5a87b0b7f8c1937198be101052bf9d633103fcad
SHA512 775a8a4f29ab524f81ba26744e507c2b4ee24756a413ab6972958aa71809ef2281533987bcf1819d95e8e2375a373435751c8a66641ca0e8b74311221b796263
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 357e6c8af0b071fa3221e36c42551bc5ae069486162f67854cdd7957a7d25205
MD5 69b68ea75c1736b8c13c2644709fe4de
SHA1 d36f8fcf9f4487e83b50fc2ffa700f71498b045d
SHA512 516b35c4a30d9fba95569e78a744097994ea3544dd90103bdbc1398abe964f09007a3fa93ddd36ca856d84c1f92da7f198fe55c69b75e2404797cdd1dbd7982f
SSDEEP 6:7+/l9fU1Gn1Epg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKl:7+t9qqLiuWdYRmBEyPbq
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 3c247c61848f76b886a8585267d85801cab5d617a742e905b7334a64a5485455
MD5 d585b17960b14fcdf7fed885d7e96c98
SHA1 d10d7ae7b0befd58353f1dba9a12ecf982a54eff
SHA512 1d812afdd40ed946d2dcda411eeffd4f49feffc831f4349ce58cbf99380b0ff6712371814b1f853a4784e34963d6ca9a50c3e4f902dea4cb2e4b18b4081da258
SSDEEP 6:7+/lVPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKK:7+tRqLJdeWRmBEyPbp
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 a0cba9600d1c4273faf4947cab33274da9328364ff8ce3276e11dc7852c658e7
MD5 fa6cedf09451d33cf35d4cde37af6831
SHA1 4eaf4192ec121b3f351cdf44b6c12279e27d66aa
SHA512 47645d212732e2e45ca979c30668a4741f7c5446dbb032fde7b2d31319450eb1593c3b41cad90345f4a6c3fad2d2a43f436fdd313c9d9adfe801d08a20aab6e2
SSDEEP 6:7+/l9GxPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKr/r:7+tA9qLmqKRmBEyPbYr
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation3513701517494974165tmp

Path /data/data/org.bax.project/files/PersistedInstallation3513701517494974165tmp
Size 90B
SHA256 78940c2a48ad08fc103fd8cc230fad2855d924b5a7130f492fe403cd13056e05
MD5 c0b9435ea942af76cecb1a4d8d59c298
SHA1 bf82ce691028f3e343f8c8dcb6a2c2fc0ac87285
SHA512 48878a909e7aa2efa76626fba3240b77606f9f8e496637e02578a579c8fbaa3071a983a5245ec2578e877d1d79c5ce6e6e30776d1261da319d0d27b36a892bb8
MD5 SHA1 SHA512

Submit Download

PersistedInstallation3581323387368526327tmp

Path /data/data/org.bax.project/files/PersistedInstallation3581323387368526327tmp
Size 569B
SHA256 bfac0ee56297926dde1446ccc05005c754a524fca7c068fa3b86c1611be1b68f
MD5 c92369c4d975a4cc687e5ed6a4eca27c
SHA1 5467afe56a07df7618594251949db7070ce1aa3f
SHA512 ae13516a826f4f0a65505223a883fa14adb06529ccd4df4e243efa949a59a171e0777fe4d64aca2a54309ce31e76c9f106ea1b2d6d0a17752a7c1a905dea820b
MD5 SHA1 SHA512

Submit Download