General

  • Target

    e956482c364edafb872b264adfbf7ed7.apk

  • Size

    6.1MB

  • MD5

    e956482c364edafb872b264adfbf7ed7

  • SHA1

    3ee82f2c35b5f3764b2079befc4911187e1d34f3

  • SHA256

    d2e33b8cf3da437a5ca852cf695bedbf1f78a8f966fab850cedba0a263f0615d

  • SHA512

    16e2ccc76add2cd28791c2c6759bb2dfec4e5c9687187c96e781a43d003d64c46922620e8de18823ef8d4403f85206a343b525d72d15b44f52909b7e38b6c69f

  • SSDEEP

    196608:qzwGtzFlbifPHPO4+QzIvlqnIxuBNr1dFu:MXtzPbif/v+Q2lqntBNrvg

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://i-mobile-fa78e-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 2 IoCs

Files

  • e956482c364edafb872b264adfbf7ed7.apk
    .apk android

    com.imobilelab.icard

    com.imobilelab.icard.MainActivity


Android Permissions

e956482c364edafb872b264adfbf7ed7.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET