abece4841f503b30454f651906de6cbc5d35a464877fb95db4343d63a3b35888

Analysis

max time kernel
2s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
28-11-2024 22:38

Target

8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk
Size

3.9MB
MD5

bbf2a8ed116cb34454a60641bb2d6a57
SHA1

ad5b1a2d95be058511dd4b5c320a18117bbb21f3
SHA256

8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768
SHA512

b3e63d876995feb7a5c69778c79e2e96e98710993a4864789c6d13c1247e56e05cbabe7dab66e9573048779387f014e0bed9c50e01ea0db94482cefc0682ce09
SSDEEP

98304:zGZTSHh5MkkmXx5TfPHt74OM70al0QOB9eg6CIy3lYR:zGZTSHMahVXHt74xwQ6cN9R

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

org.bax.project

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

Processes:

org.bax.project

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4250

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/org.bax.project/files/PersistedInstallation4121374272709353782tmp

Filesize
90B

MD5
ab09a0398c05470b9046068e48a2e0d5

SHA1
8a80dd1a0b37842b3db238a9bf85fd3e65b1e0f1

SHA256
60979fe9208643c5e7690d73ac1867603dce3f300838ea364ce297bea2c67246

SHA512
ace60943fc0ebfe5701db81dd1dca544781468d678ae6e05a87cfa1dcb31171e35d95b4533951e0c2dca4cca2679e05aa739a9f75cf985af1f50ca51c7a773dc

Download Submit