General

  • Target

    b8f63bf4f81d2844ebcf8211900a2418.bin

  • Size

    4.2MB

  • MD5

    b8f63bf4f81d2844ebcf8211900a2418

  • SHA1

    4590427a61ab07dfce6ee5d5b0c2ee5da22d4343

  • SHA256

    e47cbcb651a19da46659075d87c232fbe6bdf04d495bdef5f7a50176af105eb5

  • SHA512

    4d2a757a972e82490a461418cdacf66d9d22019cf42ae6ac120c6392208de08c322a7b4d57e2d4115a95d12cdb50b653c8477b9cbf1058645505da3b914a4c4a

  • SSDEEP

    98304:Fv1RSYiM6sAUuWhC6IB3oEjsu3jKYnMOvpmYrboTwrgYpl:FvP6CphlylhTKLIkYrLpl

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icici-7dd27-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 1 IoCs

Files

  • b8f63bf4f81d2844ebcf8211900a2418.bin
    .apk android

    Password: infected

    com.example.icici

    com.example.icici.MainActivity


Android Permissions

b8f63bf4f81d2844ebcf8211900a2418.bin

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

com.example.icici.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION