7f15de43d3d5f54c59efde740fe02b72bc7e9cb720010520cbac9b5e99484f46 | Triage™

Analysis

max time kernel
3s
max time network
135s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
28/11/2024, 22:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9a18e212ffdd94dd262de2eeab7758657dee156ee2ddebeec6b97df7227ab8be.apk
Size 3.9MB
Sample241128-2drsaasrf1
SHA256 9a18e212ffdd94dd262de2eeab7758657dee156ee2ddebeec6b97df7227ab8be
MD5 527ed1fd528f1fc0411ded6a0fe7aae7
SHA1 1ba7df77264a60ce99c4bff19f87f0d3836e8331
SHA512 e401279acbfadfeffb72bad1b7fd794f765c4f19d30bc581a1da74bcdb74274ddb5ff48c74d3c49486e7562da67614d188e10cf2209472f025242ebe5a3b0f18
SSDEEP 98304:zGZTSHh5MkkmXanyXzECw9F+TINptfDx9DhlTUG:zGZTSHMaKnyQCwWMX1Dx9VX
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4922

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/org.bax.project/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 1231ae902c7e8adbcfcea825d1d3320f962ea3cc23f348fee19046fa8dcb6fc8
MD5 b9489d2cba933a28458c2525b86bd84c
SHA1 c2f8ab85baa1a25434e8d98e7ed0b3b8b096d3bd
SHA512 e7764ff00b095e7e9fc4fc6fec1eac72375095a6c516af92da735b90b576ae532c68686784706ef7f556d503f19a5c6ed36d9fde7eae30d8daca7a08d8f75623
SSDEEP 6:7+/l9B8tfkWg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKPn:7+toqL8EEh9zmzrfRmBEyPbI
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 6b51bf1b51b8e50501c4fc4fe54e53e391e257e9eb35d2568c2cdf40d75645db
MD5 f923c86ba79e772ba70fae5db89df4e7
SHA1 987a32f4d15611aae1c2c075a55a70ceaadaf768
SHA512 7e210bc609c58d258b75ad2ba1f0430d22a382aff841d1407c3a099d2cf0cb1ff9c3e7cc9602ac012c29c53d6ac7c50c4231ffac63496251732b86e455768b22
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 8a5c5741e1549fd94ce06260450b95c25557648c2fee5ee5cd418ee8a92f4298
MD5 87c86321751c9e3c6da0580f2d8f8d9c
SHA1 4e323ecd6a6bc4cc50566f774cc658ae296d4112
SHA512 3d8beecbcca33efad182806b7804603b097649b9fc27685d92898c2c9d654c1ef2b3cc1810583f50861c8f02ea4807d7a9c62c0cf5ee7123a7810467a87c8b9e
SSDEEP 6:7+/l978CSFn1wy/ng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKgB:7+tZLSky/nqLiuWdwRmBEyPbT
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 4ced23b802670abfc803ced2f672907f166a584fe66b18767170e31bd59d6654
MD5 8112fabbbcbbeab65ad700ebfbeeebfd
SHA1 c1c9f6089eb74cf3a973f4125ecc30b41907a394
SHA512 ca1ef8d817c671fa0ae8e54957f155306949d097778021f54b5cb49e11e2d9e5c79cbf15ad19b0fd922160a467caf1268553607006932bcbd30d1b26e54970bb
SSDEEP 6:7+/lOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKT:7+tiqLJdTRmBEyPbw
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.bax.project/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 08215253a9065f7aeee70bb0233c13d30cb784d5235cd5f17bf68f8d1a5f3291
MD5 21fb4c38983ec7623f1bacabfacacda9
SHA1 a76b8375f12591809a5c22fcce4553397bdc36d2
SHA512 ac6debe6cf93707764eadf3345c0451e3dd1ff37852dc1eb5531bb0a559dbdc29bf86df219adbc9a0711768791fd741ae2d36ea5265e73896afe00a53c25e449
SSDEEP 6:7+/l9p02Pg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKyl/CLr:7+tAqqLmqCRmBEyPbDtW
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation224966388910464121tmp

Path /data/data/org.bax.project/files/PersistedInstallation224966388910464121tmp
Size 90B
SHA256 aeaf9e942686c027f2e1d0538fdd2de31c3423618a7293d25ac77530ac92f230
MD5 3968c655a776339014180824a5a73af7
SHA1 83d51c85c4dc927aed6ff4ffbe2878427b4c15c9
SHA512 c6d962554ceed7ca8ae39de30bc90b03a48f2c6cf35d8873a7cafc9f395d0563efb5d449b55001eec901129d05c9a2d9a2762db4adf6f9a34858aa53108d0a53
MD5 SHA1 SHA512

Submit Download