Analysis

  • max time kernel
    609334s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    11/10/2023, 20:18

General

  • Target

    IClCI 3v.apk

  • Size

    3.6MB

  • MD5

    adbb89d079afbc2e5f90d0eaad4c839f

  • SHA1

    9129c4f4cae64bee75e178b0144abdfe9bd8d098

  • SHA256

    124edd5dfd9f8291e1e8f850a4c3d9d6b2a48fef28fe2c1f557172066058f292

  • SHA512

    6db7411c76bfa0c95e886ee51d0731692c3ca472c1bb31b939c117d39319b9f156b072a00948e6ac04ac9a8fc8109a96bb6c79699acf8debd60e969e3e347483

  • SSDEEP

    98304:w47rDlhaKGZl5BoyfTj9Ffhvsja4r9orJ0:77rDITrfhvit

Malware Config

Signatures

  • AxBanker

    AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

  • Removes a system notification. 1 IoCs
  • Checks the presence of a debugger.

Processes

  • com.sadhiwyuj.online
    1⤵
    • Removes a system notification.
    PID:4163

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads