General

  • Target

    567f954e8f1becc72e9319004aa71611.apk

  • Size

    4.7MB

  • MD5

    567f954e8f1becc72e9319004aa71611

  • SHA1

    a24db974e849dab143ce191e06c71d78579818a4

  • SHA256

    473c7c0e49506c08de7c40abd88b7800b7c9f3a88b4230734b903b9fc522605a

  • SHA512

    a72a45015c4800336fc7948cd29a6d066bb8ebf646aef44e132427a77904425a0cf9550624afb4e9871893548d91758a48f81b69dca9932eb10cee1d9878e6ea

  • SSDEEP

    98304:OubIaa6q+upNzvElDDaml6IzvOxGHWgcf7EYspgJbSxFslNPKHf17i0rvTNeubF:OozmplvEBoMvOcHW/hspOb+sl0ZNeubF

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://allcardservice.com/api/user/step1

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 4 IoCs

Files

  • 567f954e8f1becc72e9319004aa71611.apk
    .apk android

    com.supercell.clashofclans

    com.supercell.clashofclans.SplashActivity


Android Permissions

567f954e8f1becc72e9319004aa71611.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.supercell.clashofclans.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION