Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    25/01/2025, 09:00 UTC

General

  • Target

    8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768.apk

  • Size

    3.9MB

  • MD5

    bbf2a8ed116cb34454a60641bb2d6a57

  • SHA1

    ad5b1a2d95be058511dd4b5c320a18117bbb21f3

  • SHA256

    8baea2e83cfc696a8ff9186f48d0da2f3192acb7c17267964117b5e947a05768

  • SHA512

    b3e63d876995feb7a5c69778c79e2e96e98710993a4864789c6d13c1247e56e05cbabe7dab66e9573048779387f014e0bed9c50e01ea0db94482cefc0682ce09

  • SSDEEP

    98304:zGZTSHh5MkkmXx5TfPHt74OM70al0QOB9eg6CIy3lYR:zGZTSHMahVXHt74xwQ6cN9R

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • org.bax.project
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4263

Network

  • flag-au
    DNS
    semanticlocation-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    semanticlocation-pa.googleapis.com
    IN A
    Response
    semanticlocation-pa.googleapis.com
    IN A
    216.58.213.10
    semanticlocation-pa.googleapis.com
    IN A
    216.58.212.234
    semanticlocation-pa.googleapis.com
    IN A
    172.217.169.42
    semanticlocation-pa.googleapis.com
    IN A
    172.217.169.74
    semanticlocation-pa.googleapis.com
    IN A
    142.250.180.10
    semanticlocation-pa.googleapis.com
    IN A
    142.250.187.234
    semanticlocation-pa.googleapis.com
    IN A
    142.250.200.10
    semanticlocation-pa.googleapis.com
    IN A
    216.58.204.74
    semanticlocation-pa.googleapis.com
    IN A
    216.58.201.106
    semanticlocation-pa.googleapis.com
    IN A
    142.250.178.10
    semanticlocation-pa.googleapis.com
    IN A
    216.58.212.202
    semanticlocation-pa.googleapis.com
    IN A
    142.250.179.234
    semanticlocation-pa.googleapis.com
    IN A
    172.217.16.234
    semanticlocation-pa.googleapis.com
    IN A
    142.250.187.202
    semanticlocation-pa.googleapis.com
    IN A
    172.217.169.10
    semanticlocation-pa.googleapis.com
    IN A
    142.250.200.42
  • flag-au
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    172.217.169.46
  • 216.58.204.78:443
    tls, https
    1.2kB
    40 B
    1
    1
  • 172.217.169.46:443
    android.apis.google.com
    tls
    6.0kB
    9.5kB
    17
    26
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    semanticlocation-pa.googleapis.com
    dns
    80 B
    336 B
    1
    1

    DNS Request

    semanticlocation-pa.googleapis.com

    DNS Response

    216.58.213.10
    216.58.212.234
    172.217.169.42
    172.217.169.74
    142.250.180.10
    142.250.187.234
    142.250.200.10
    216.58.204.74
    216.58.201.106
    142.250.178.10
    216.58.212.202
    142.250.179.234
    172.217.16.234
    142.250.187.202
    172.217.169.10
    142.250.200.42

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    172.217.169.46

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/org.bax.project/files/PersistedInstallation5023953492585205286tmp

    Filesize

    90B

    MD5

    fff24ecdd7e644194d33da9d769629ad

    SHA1

    25a97814a2e92575ca6a0be4fd9c2fffc6844881

    SHA256

    942d75c7c27079f2cf086bd676688bf5b27a35e90ae484d75a94b35170a0a889

    SHA512

    da2e36f27c65cfc27f6c90fa134df838339ebe7c533c83cca7c0f31378d470849b0211ee297cb1e11fc54312b07e3e9936992e2bd7f85cf216bf64d5ad6c893a

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.