Overview

overview

10

Static

static

10

0ad0b97537...75.apk

android-9-x86

1

0ad0b97537...75.apk

android-10-x64

1

0ad0b97537...75.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ad0b975375880496476f402d6154875.apk

  • Size

    3.2MB

  • MD5

    0ad0b975375880496476f402d6154875

  • SHA1

    3d6a29038420f760a618beacff03ae9e7bc423cf

  • SHA256

    3dc5cd81c10140dbf1fb233152ef2856d4f763ba3b392bc607d32d7d4c59c3fd

  • SHA512

    c070243d800e1ab7d16db6178fb9673b66e4e253795d20a6f1e0301663edc2e3646e29de77b7f3b15c09fd5cb2381400922cdfea33181a20ea0884cb98b84fd3

  • SSDEEP

    98304:fcN1U6OMPTQAQFigSPo4P+7i0r+A3kpZYzKg:fcEMPTQAKigSg4K3kpZ4

Score
10/10
axbanker

Malware Config

Extracted

Family

axbanker

C2

https://servicenows.in/api/user/step1

Signatures

  • Axbanker family
    axbanker
  • Requests dangerous framework permissions 4 IoCs

Files

  • 0ad0b975375880496476f402d6154875.apk
    .apk android

    com.kingroot.kinguser

    com.kingroot.kinguser.SplashActivity


Android Permissions

0ad0b975375880496476f402d6154875.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.kingroot.kinguser.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION