9a18e212ffdd94dd262de2eeab7758657dee156ee2ddebeec6b97df7227ab8be

Analysis

max time kernel
1s
max time network
152s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
29-01-2025 02:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9a18e212ffdd94dd262de2eeab7758657dee156ee2ddebeec6b97df7227ab8be.apk
Size

3.9MB
MD5

527ed1fd528f1fc0411ded6a0fe7aae7
SHA1

1ba7df77264a60ce99c4bff19f87f0d3836e8331
SHA256

9a18e212ffdd94dd262de2eeab7758657dee156ee2ddebeec6b97df7227ab8be
SHA512

e401279acbfadfeffb72bad1b7fd794f765c4f19d30bc581a1da74bcdb74274ddb5ff48c74d3c49486e7562da67614d188e10cf2209472f025242ebe5a3b0f18
SSDEEP

98304:zGZTSHh5MkkmXanyXzECw9F+TINptfDx9DhlTUG:zGZTSHMaKnyQCwWMX1Dx9VX

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.bax.project

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.bax.project

org.bax.project
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:5073

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.bax.project/files/PersistedInstallation371670970490854977tmp

Filesize
90B

MD5
41a88bb5cc5ce10052df5b735ab6c806

SHA1
4c1542cc209b64170f6a0c8a26a3c5758ae6f55e

SHA256
014462f1847f300c44eeecc5dc828cb73aaedb24a4982235709882a6c5c80473

SHA512
b7be6d1e7f82cf9dd4a9906a6a338a9b5ab923f02fbe93aedcb7d4818c5e146bcf16c793d9f383f78287dd6eef1a314552e8e13f851b7ec48151b9454139d739

Download Submit