General

  • Target

    7eea6c20b5df04e4dc63a18bd963c0f7.apk

  • Size

    8.0MB

  • Sample

    231023-ttwgeaac3y

  • MD5

    7eea6c20b5df04e4dc63a18bd963c0f7

  • SHA1

    7be6bef5f87f915cc5286adc1221678d4c090e26

  • SHA256

    215c2663ff556f27eaf55d61f754d72938635d1901b7c8e2be64b66181e801bf

  • SHA512

    4aad11aae512368cdb4d8d46d9c56991b7e24687140de91c8cdbf59dc9c3f9e0e160e853830840733a357ebad6e8385417a68b077bbab470afac73a944b7b915

  • SSDEEP

    196608:+KKroXNaIN5OT5G8Iz7NxJlJqCcAZs55Ks9t:FK0XwIN5G5Qz/JJs55Ks9t

Malware Config

Extracted

Family

axbanker

C2

https://addnow.co.in/api/user/step1

Targets

    • Target

      7eea6c20b5df04e4dc63a18bd963c0f7.apk

    • Size

      8.0MB

    • MD5

      7eea6c20b5df04e4dc63a18bd963c0f7

    • SHA1

      7be6bef5f87f915cc5286adc1221678d4c090e26

    • SHA256

      215c2663ff556f27eaf55d61f754d72938635d1901b7c8e2be64b66181e801bf

    • SHA512

      4aad11aae512368cdb4d8d46d9c56991b7e24687140de91c8cdbf59dc9c3f9e0e160e853830840733a357ebad6e8385417a68b077bbab470afac73a944b7b915

    • SSDEEP

      196608:+KKroXNaIN5OT5G8Iz7NxJlJqCcAZs55Ks9t:FK0XwIN5G5Qz/JJs55Ks9t

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

    • Requests dangerous framework permissions

    • Target

      hook.apk

    • Size

      3.3MB

    • MD5

      f2ae4a29dbfc250dd10151db321025c0

    • SHA1

      8b9163ab9c65399c6cdbab2e9837988026b8b0c3

    • SHA256

      c708b795b932ed551b14a727b6b75e05b07935b79e49d9489671fb926d096975

    • SHA512

      1ae120d361b55d5154a16e1d48a9059fca36b7e72099da3c4727f1927f8c4d77072f02b4ed8d0156466e5c6ec0765cdccf862b8f06eb8e2c729b767ef08b9fa5

    • SSDEEP

      98304:fZFpow17hFkIPFcpHTFTYnoxl/tB9XByOsHN3:hj/FkpHTFscvcOst3

    Score
    1/10

MITRE ATT&CK Matrix

Tasks