Resubmissions

03/02/2024, 23:46

240203-3sstkafabr 10

03/02/2024, 22:01

240203-1w89lsbaf6 10

General

  • Target

    742be50dc1b015497057261fce0c6dcb31f11421fe2c2fd131962f8c1964ea4a.bin

  • Size

    3.1MB

  • MD5

    ef8e5b30839215fda9fe4b38cba430ec

  • SHA1

    80f72352f7230be6f056af5d9910d396f68258b9

  • SHA256

    742be50dc1b015497057261fce0c6dcb31f11421fe2c2fd131962f8c1964ea4a

  • SHA512

    4275ee302d8db08d1316041614906a6d4c3698c4c8c35902d10a280f4376ae3ac3b503f09efd039989384676a239bcc108c5e9b1c40ae0a1af58eef037bc0d32

  • SSDEEP

    49152:PZF9GsfKiN9gByu60foDHCoWl79AzKqD4BkSQvWcplaHraGpqbcoTwrdVZMlp:PZy0KWOkGgQDqUurZ/4oTwrdVZk

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://reward-a11cd-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 4 IoCs

Files

  • 742be50dc1b015497057261fce0c6dcb31f11421fe2c2fd131962f8c1964ea4a.bin
    .apk android

    com.example.anew

    com.example.anew.MainActivity


Android Permissions

742be50dc1b015497057261fce0c6dcb31f11421fe2c2fd131962f8c1964ea4a.bin

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.FOREGROUND_SERVICE

com.example.anew.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION