General

  • Target
    axis-rewards-offer.apk
  • Size 5.8MB
  • Sample231014-by1mtabg36
  • SHA256 44ff8737b442f65e1665f93a009b42ae21eec4614c94e0de2ea27b85250e908c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • axbanker

C2
  • https://edgecredits.in/api/user/step2

  • https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 4 IoCs

File Explorer

  • axis-rewards-offer.apk
    .apk 5.8MB
  • baseline.prof
    1KB
  • baseline.profm
    183B

axis-rewards-offer.apk

  • SHA256 44ff8737b442f65e1665f93a009b42ae21eec4614c94e0de2ea27b85250e908c
  • MD5 SHA1 SHA512 SSDEEP
com.play.googleprotect

Android Permissions

axis-rewards-offer.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SEND_SMS