General

  • Target
    ap.apk
  • Size 9.4MB
  • Sample231218-l6caasbeb2
  • SHA256 e1a006f8758618539d5d414262da6559f5896389786026c851bde4a8e4d8c618
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • axbanker

C2
  • https://dchdn.in/api/user/sms

  • https://dchdn.in/api/user/step1

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 4 IoCs

File Explorer

  • ap.apk
    .apk 9.4MB
  • hook.apk
    .apk 3.9MB

ap.apk

  • SHA256 e1a006f8758618539d5d414262da6559f5896389786026c851bde4a8e4d8c618
  • MD5 SHA1 SHA512 SSDEEP
com.offer.rewardshs

Android Permissions

ap.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.offer.rewardshs.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION