General

  • Target

    11a13eaa935d225ae0192481e71c1d5c8594cf4a21e65ff2ca48202eb0eadbb3.bin

  • Size

    4.3MB

  • MD5

    32bd4b5e8069a08e99436b3aeff93f00

  • SHA1

    64d54aa959938e19754c3a72e70e52f0f856e19e

  • SHA256

    11a13eaa935d225ae0192481e71c1d5c8594cf4a21e65ff2ca48202eb0eadbb3

  • SHA512

    cfa5987b76eed6dcd7106b9d99983623092e72e60d045c99880733efc8693dfec5e9d13212025dfc7d15f44fbfb6c31066f411eb5bedc0823d005a8c653d868f

  • SSDEEP

    98304:Q3jol75GJv/GfncYwEGW8DzA7aslBdKqht1CdR5A29GYd9:QMl9GJHEUE0zk3BdKEtIP5A2hr

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icotot-81e9f-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 2 IoCs

Files

  • 11a13eaa935d225ae0192481e71c1d5c8594cf4a21e65ff2ca48202eb0eadbb3.bin
    .apk android

    hello.uwer.hello.hello.google.is.the.best

    hello.uwer.hello.hello.google.is.the.best.MainActivity


Android Permissions

11a13eaa935d225ae0192481e71c1d5c8594cf4a21e65ff2ca48202eb0eadbb3.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE