General

  • Target

    F452CF7F507521E455C6D5257FEF2ED6D80A9803BFD7AFB8FB54C8BC7C6D92FE.apk

  • Size

    2.7MB

  • MD5

    ee32fb1c4fc9b2304da3f6731d760335

  • SHA1

    f4f298fe413a2ed6506da8bbac70700c07d1b416

  • SHA256

    f452cf7f507521e455c6d5257fef2ed6d80a9803bfd7afb8fb54c8bc7c6d92fe

  • SHA512

    68cf22ed2561f00cacdd19f5c67a80fd537cfe2a8242a1282c9e4560344d9849bc1d253bebaebf6597378268205047c79a99fbd52c3e668b742ce309aafb9571

  • SSDEEP

    49152:gg95ETcwwq2M1znUTxJ1b5pkxv3/tQxpvd25rALkfuCOddYmg8NqyeqP0gcG:xcEq5B0R5Cd3/t025MLsrmdY38Nuqcg1

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://totot-9046e-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 2 IoCs

Files

  • F452CF7F507521E455C6D5257FEF2ED6D80A9803BFD7AFB8FB54C8BC7C6D92FE.apk
    .apk android

    hello.uwer.hello.hello.google.is.the.best

    hello.uwer.hello.hello.google.is.the.best.MainActivity


Android Permissions

F452CF7F507521E455C6D5257FEF2ED6D80A9803BFD7AFB8FB54C8BC7C6D92FE.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE