Overview

overview

10

Static

static

10

app1.apk

android-9-x86

10

app1.apk

android-11-x64

10

hook.apk

android-9-x86

1

hook.apk

android-10-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    app1.apk

  • Size

    10.0MB

  • MD5

    aa9123b81701d3df7af7a626fc6ce8af

  • SHA1

    25c7b39411cc4294a07d740344f0c6df3b7a6ddf

  • SHA256

    78986663305100a5a4c3ec972d337303cb7162deea3a19b367c6dcbc9d88d5ad

  • SHA512

    cd42c6332a60d767610fc0ddf5faec327dfff8b271faba38b489f93fa9dc6422485b5408397a6c828dc7ea361fbc9f91a15fa0f9debe7110c0962bad695592b8

  • SSDEEP

    196608:YlvpyVOLMeA/jvUr5ElRoBqpc51Aw9hEgTP:mpyaMeYzcOMegTP

Score
10/10
axbanker

Malware Config

Extracted

Family

axbanker

C2

https://icicistore.in/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
    axbanker
  • Requests dangerous framework permissions 4 IoCs

Files

  • app1.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.lulu.lulubox

    com.lulu.lulubox.SplashActivity


  • baseline.prof
  • baseline.profm
  • hook.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.lulu.lulubox

    com.lulu.lulubox.SplashActivity


  • baseline.prof
  • baseline.profm

Android Permissions

app1.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SEND_SMS