Overview

overview

10

Static

static

10

0ad0b97537...75.apk

android-9-x86

1

0ad0b97537...75.apk

android-10-x64

1

0ad0b97537...75.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    0ad0b975375880496476f402d6154875.apk
  • Size 3.2MB
  • Sample240110-vz2faacga8
  • SHA256 3dc5cd81c10140dbf1fb233152ef2856d4f763ba3b392bc607d32d7d4c59c3fd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
axbanker

Malware Config

Extracted

Family

  • axbanker

C2

  • https://servicenows.in/api/user/step1

Signatures

  • Axbanker family
    axbanker
  • Requests dangerous framework permissions 4 IoCs

File Explorer

  • 0ad0b975375880496476f402d6154875.apk
    .apk 3.2MB

0ad0b975375880496476f402d6154875.apk

  • SHA256 3dc5cd81c10140dbf1fb233152ef2856d4f763ba3b392bc607d32d7d4c59c3fd
  • MD5 SHA1 SHA512 SSDEEP
android
com.kingroot.kinguser

Android Permissions

0ad0b975375880496476f402d6154875.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.kingroot.kinguser.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION