abece4841f503b30454f651906de6cbc5d35a464877fb95db4343d63a3b35888

Analysis

max time kernel
3s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
28-11-2024 22:26

Target

8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
Size

3.9MB
MD5

bbf2a8ed116cb34454a60641bb2d6a57
SHA1

ad5b1a2d95be058511dd4b5c320a18117bbb21f3
SHA256

8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768
SHA512

b3e63d876995feb7a5c69778c79e2e96e98710993a4864789c6d13c1247e56e05cbabe7dab66e9573048779387f014e0bed9c50e01ea0db94482cefc0682ce09
SSDEEP

98304:zGZTSHh5MkkmXx5TfPHt74OM70al0QOB9eg6CIy3lYR:zGZTSHMahVXHt74xwQ6cN9R

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

org.bax.project

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

Processes:

org.bax.project

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4324

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/org.bax.project/files/PersistedInstallation7699023198845316844tmp

Filesize
90B

MD5
eff8899ad06e3f3bb48d73fe5b494037

SHA1
af2e543ef5a2c57a1422397dd64be132f3802d10

SHA256
db9322c6a5c0a858f8878471316e7aa04c3355419858a87fbfe976174f46f846

SHA512
ce392c2a8d7fed7c088804bfe751f89e60c6986baad7afe7af2d6976f7871fb1e9a4b765ee4cc163c97cc81446965941aeca56ce582004433498fe6437b87209

Download Submit