abece4841f503b30454f651906de6cbc5d35a464877fb95db4343d63a3b35888 | Triage™

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
28/11/2024, 22:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
Size 3.9MB
Sample241128-2cwd3symhm
SHA256 8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768
MD5 bbf2a8ed116cb34454a60641bb2d6a57
SHA1 ad5b1a2d95be058511dd4b5c320a18117bbb21f3
SHA512 b3e63d876995feb7a5c69778c79e2e96e98710993a4864789c6d13c1247e56e05cbabe7dab66e9573048779387f014e0bed9c50e01ea0db94482cefc0682ce09
SSDEEP 98304:zGZTSHh5MkkmXx5TfPHt74OM70al0QOB9eg6CIy3lYR:zGZTSHMahVXHt74xwQ6cN9R
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4505

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/org.bax.project/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 d471c4b38cc2f36430dec31b8e7c1991fa4e14f1a434cb570572a7d5647d8acb
MD5 9eecd73304d4a44fe7ad162c38848482
SHA1 3bbb6b6f93b88ec4f46240eedc93be9a3e3b6a31
SHA512 114fb3e7dcedd55c9971029aaac9583d5f6d96318664aba45d4d76dab3576443f2fafa9d2b556da14bccbf4f7767e73a43c5e3dee533578919c25b3bd91d045f
SSDEEP 6:7+/l9FdWg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKr:7+toqL8EA9zmzrfRmBEyPb0
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 0c91f663f5cf74559417dfb8bec1561941f9216159682742c13080581a37c577
MD5 532f20638c0db0be30be3d747fc572e3
SHA1 99f00961c6f36497819fffd53ce1981e6e1c3156
SHA512 d837769b5ffbc55e7eee318d46f7667fe5115d85b26db6798a0d2ce829cc22651d75a20aeab4a278865c53c0ceaf385fda39487bbe2997321752acae625f7106
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 b1c8159865f9a9b982a71ce59c4660b3e853460c0d6cd381cf68e55e02949348
MD5 3792d6c2a626261d6ce5816b3aa621c7
SHA1 ba75d4479813290f3b3e6a18305d83172a139469
SHA512 03d949bab81de22cd61ccb0ed6d394554d192fc304d12c4e2c26ffdac6e1837e04c171d7d1061b06e54afdfaf1d48955bb8e3d2cf8ae4750b205e07487225a04
SSDEEP 6:7+/l96/SFn1ing9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKrn:7+tEqLiuWdYRmBEyPbKn
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 b08c2f1884edd57fdb88dd5f9a021672e7e892df7cc02f6fdc8207c977f191aa
MD5 5f0937fa47cf63dd3f1a4ab8a5d856bb
SHA1 ee2a414edaffb239d3cb756745e97371f664f48c
SHA512 73ffbe087a479c3e34a48a7419a6870e9c63db3b9e91640217c78e45b2195547a9c6c188dc88b37af29158946be818f0e94cde6f5a5911da9ad9e77a3f7436fc
SSDEEP 6:7+/l5algPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK8N:7+t5al4qLJdeWRmBEyPbr
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 6bf4ad5683c0f24cb002630f8bfca9b7c4494bbe0a89f27a8b978a3f27be58e6
MD5 6e8ea74c5f7702fac3bac8ed4578a0db
SHA1 aaf1e74cc44659569d8a18bc8e0e6cfb8ffb9963
SHA512 541843b8d0c23307fec38e4723f5c0a741f9b2b22364da9f26a82e1694062034b2f5c781342ee3fd1f26cc4a0af970e69a0c22be88ebec49bf1ffa5e04d731f9
SSDEEP 6:7+/l9WDGPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuK289M/q:7+tcuqLmqKRmBEyPbH8Sq
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation5972244028746396220tmp

Path /data/data/org.bax.project/files/PersistedInstallation5972244028746396220tmp
Size 570B
SHA256 bc919016fcaccf7ee55f6ae3af3ca4f5d1e297bc930e940ab70741f861c833f5
MD5 5212bb370849e68a7684ceb93045d7ca
SHA1 ca7ba317a9648616f0a0a0d8e2712090d9e4107c
SHA512 0bd575778b2017b77b0810af8f292ca6a82afce660b0a6bdd6657a6c767a2c7cccbb7c14111f8b5773b9f26b852894b338dba2da6e28b55b147a1e9a128ea490
MD5 SHA1 SHA512

Submit Download

PersistedInstallation6844689002157467895tmp

Path /data/data/org.bax.project/files/PersistedInstallation6844689002157467895tmp
Size 90B
SHA256 169a3b22fda5286307f3f42550c4a73044fe80dfc1143a3831b36dcefe0381f3
MD5 92a7ffa21b161fde68e0c77e971268ff
SHA1 5557d517e183b4736ca677ec2c14a94c994ff3ce
SHA512 0fe381c60df304d7e59e02cfe5c135b47271ba2629ea3e332c5ca8b55c8e1bc43a585255cbb24e480d716d091f93f39a2c56388f804e2ab54c2e66dde724120a
MD5 SHA1 SHA512

Submit Download