General

  • Target

    42b6543d7ddace17549e902c6ba0794cab02489868b957a52569004c112a48dd

  • Size

    17.1MB

  • MD5

    044dd2092e108a508942896048543132

  • SHA1

    4e04b84e651934dd36da0aec90ab75ee71945fa3

  • SHA256

    42b6543d7ddace17549e902c6ba0794cab02489868b957a52569004c112a48dd

  • SHA512

    04ad5330fc1994358079a617965fdaf7533458d0caaaf55f0e545b35ace42f72ba872421e166b5c4d32c88a54a3e9a0fba9edc451c0e4cfc070efdc7a06441c2

  • SSDEEP

    393216:Ro15sMzO9FNEJ2xFWqEUaUhaC09/X68TS6dao4PPsqCafWNj2KkvsXEG:RoDXO93aUAvv4BBZeNaKkvsXEG

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://sturdy-practice-161006-default-rtdb.firebaseio.com

https://sturdy-practice-161006.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 7 IoCs

Files

  • 42b6543d7ddace17549e902c6ba0794cab02489868b957a52569004c112a48dd
    .apk android arch:arm arch:x86

    in.droom

    in.droom.activity.SplashActivity


Android Permissions

42b6543d7ddace17549e902c6ba0794cab02489868b957a52569004c112a48dd

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE