General

  • Target

    22c39175ba2d747ffddb7d0644ff1482.apk

  • Size

    6.4MB

  • MD5

    22c39175ba2d747ffddb7d0644ff1482

  • SHA1

    0a80be4a33080f4d4d84c74cc3a53354b2295552

  • SHA256

    85ff9168071f38198691e78ae36740923a6d1b56d9c701214e4ba0a1de0f6622

  • SHA512

    896cdff69300df29219f226e78f1e19b10ee11f0c24e99467dc54f76f6147872885de58bf040263d5c4d9eac9a244604a28869f3aa03dbf9fd648856ef3ce702

  • SSDEEP

    98304:ZSev8qMXaymGRR7PW/Q09XCTDNAgPAy83xuBKca8gsDx+aZvaE4vxO9SNd2ofrYZ:ce0RaT8RbWr9XCBAz3xuBKc1HFc0

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icic-server-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 2 IoCs

Files

  • 22c39175ba2d747ffddb7d0644ff1482.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.conventschool.icard

    com.conventschool.icard.MainActivity


Android Permissions

22c39175ba2d747ffddb7d0644ff1482.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET