Resubmissions

07/03/2024, 11:47

240307-nxwnpaad39 10

07/03/2024, 09:04

240307-k13pmafh22 10

General

  • Target

    f16a0d6fc2e13b2909af199a37154e2d.apk

  • Size

    5.4MB

  • MD5

    f16a0d6fc2e13b2909af199a37154e2d

  • SHA1

    a174dc6f9c29f7ddf95c91cca58fc1989ad2e204

  • SHA256

    4d4122a1d8b5dc403c8b92928179143f509233ee52b4aa9fe769c4e8a9898df6

  • SHA512

    553cea9da98833a6d44e3cad2b7a2bcc2ea647e5bc0f6c2446054892624f1b7e110fe9d9824fec4af3d75a3bc80984ee5476d14f565c1ae279541f52730694c6

  • SSDEEP

    98304:pIx9Z8r34v15/ePm5IUl983q2DU26uUEwNDs0lcw/b4vA4IAZ4WzoTwrLgrU5s:2Zv2Oxl9866UALwNsW/b4vFIAZ4FwS

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icbankn-5-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 1 IoCs

Files

  • f16a0d6fc2e13b2909af199a37154e2d.apk
    .apk android

    com.rfjh.iard5h

    com.rfjh.iard5h.MainActivity


Android Permissions

f16a0d6fc2e13b2909af199a37154e2d.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.rfjh.iard5h.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION