axbanker | Truecaller[.]apk

Sharing

Copy URL

Twitter E-mail

General

Target

Truecaller.apk
Size

80.9MB
MD5

1581203a4990bef028f82dda1d02e8ab
SHA1

586c5859f8f9730269314b63ecb3cd52f94b08a2
SHA256

44cd742ef87d463c3f84f424263dae21306b207631864b383e8e94f8ded92b46
SHA512

468de490dce3fb0280e1eff8a5714bd2c44a37f59364c13651217665e824e2fc3dfaf677d9a174ab2100e25b25037bfb5d8608428681b94ecb00a2c63b407cb9
SSDEEP

1572864:gzOGgMhjFX9rl1ZIqaUQyR0bu7/APL8vjbkVxVcOP1:63TFtrpI2QyKQ/eQjbmVcs

Score

10^/10

axbanker

Malware Config

Extracted

Family

axbanker

https://truecallerapis-default-rtdb.firebaseio.com

https://truecallerapis.firebaseio.com

Signatures

Axbanker family
axbanker

Declares services with permission to bind to the system 7 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions.	android.permission.BIND_CHOOSER_TARGET_SERVICE
Required by in-call services to bind with the system. Allows apps to handle aspects of phone calls while they are in progress.	android.permission.BIND_INCALL_SERVICE
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE

Requests dangerous framework permissions 23 IoCs

description	ioc
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

Truecaller.apk
.apk android arch:arm

com.truecaller

com.truecaller.ui.TruecallerInit

Activities

com.truecaller.ui.TruecallerInit

android.intent.action.MAIN
android.intent.action.VIEW

com.truecaller.ui.ContactsActivity

com.truecaller.OPEN_CONTACTS
android.intent.action.CREATE_SHORTCUT

com.truecaller.messaging.MessagesActivity

android.intent.action.CREATE_SHORTCUT
android.intent.action.VIEW

com.truecaller.messaging.GoogleActionsActivity

android.intent.action.VIEW

com.truecaller.deeplink.DeepLinkHandlerActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.truecaller.messaging.sharing.SharingActivity

android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.SENDTO
android.intent.action.VIEW

com.truecaller.messaging.conversation.ConversationActivity

com.truecaller.OPEN_CONVERSATION

com.truecaller.sdk.ConfirmProfileActivity

com.truecaller.android.sdk.intent.action.v1.SHARE_PROFILE

com.truecaller.sdk.FullScreenConfirmActivity

com.truecaller.android.sdk.intent.action.v2.SHARE_PROFILE

com.truecaller.sdk.BottomSheetConfirmProfileActivity

com.truecaller.android.sdk.intent.action.v3.SHARE_PROFILE

com.truecaller.sdk.oAuth.view.consentScreen.BottomSheetOAuthActivity

com.truecaller.android.sdk.intent.action.v1.oAuth

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.razorpay.CheckoutActivity

android.intent.action.MAIN

com.google.android.gms.appinvite.PreviewActivity

com.google.android.gms.appinvite.ACTION_PREVIEW

Permissions

android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.READ_PHONE_NUMBERS
android.permission.CALL_PHONE
android.permission.ANSWER_PHONE_CALLS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.READ_PROFILE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.MMS_SEND_OUTBOX_MSG
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.FOREGROUND_SERVICE
android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
android.permission.DISABLE_KEYGUARD
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
com.android.vending.BILLING
com.truecaller.permission.USE_NUMBER_SERVICE
com.truecaller.permission.ENHANCED_NOTIFICATION
com.miui.mediaeditor.permission.CROP
android.permission.USE_FULL_SCREEN_INTENT
android.permission.BLUETOOTH
com.truecaller.permission.SDK_ACTION_HANDLER
com.truecaller.permission.ACTION_HANDLER
android.permission.RECORD_AUDIO
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.truecaller.permission.EDIT_PROFILE
android.permission.REQUEST_DELETE_PACKAGES
com.truecaller.permission.sdk.internal.read_account_state
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.truecaller.permission.PROCESS_PUSH_MSG
com.truecaller.permission.PUSH_PROVIDER
android.permission.REQUEST_INSTALL_PACKAGES
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

Receivers

com.truecaller.service.Receiver

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE
com.truecaller.intent.action.PHONE_NOTIFICATION_CANCELLED
android.intent.action.LOCALE_CHANGED

com.truecaller.service.AccountsChangedReceiver

android.accounts.LOGIN_ACCOUNTS_CHANGED

com.truecaller.service.BootReceiver

android.intent.action.BOOT_COMPLETED

com.truecaller.service.WidgetListProvider

android.appwidget.action.APPWIDGET_UPDATE
com.truecaller.widget.UPDATE_DATA
com.truecaller.widget.UPDATE_HEADER

com.truecaller.util.CallMonitoringReceiver

android.intent.action.PHONE_STATE

com.truecaller.util.RingerModeChangedReceiver

android.media.RINGER_MODE_CHANGED

com.truecaller.util.ScreenUnlockedBroadcastReceiver

android.intent.action.USER_PRESENT

com.truecaller.messaging.transport.sms.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER
com.truecaller.messaging.SmsStatusReceived.SMS_SENT
com.truecaller.messaging.SmsStatusReceived.SMS_STATUS
android.provider.action.DEFAULT_SMS_PACKAGE_CHANGED

com.truecaller.messaging.transport.mms.MmsWapPushDeliverReceiver

android.provider.Telephony.WAP_PUSH_DELIVER
android.provider.Telephony.WAP_PUSH_RECEIVED

com.truecaller.messaging.transport.mms.MmsStatusReceiver

com.truecaller.messaging.transport.mms.MmsStatusReceiver.MMS_SENT
com.truecaller.messaging.transport.mms.MmsStatusReceiver.MMS_DOWNLOAD

com.truecaller.fcm.DelayedPushReceiver

com.truecaller.fcm.delayed_push

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.truecaller.analytics.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.truecaller.presence.PresenceSchedulerReceiver

com.truecaller.action.ACTION_UPDATE_PRESENCE_FOR_CURRENT_USER
android.intent.action.BOOT_COMPLETED

com.truecaller.bizmon.AppUpdateReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.truecaller.credit.app.alarm.CreditAlarmBootReceiver

android.intent.action.BOOT_COMPLETED

com.truecaller.credit.app.alarm.CreditAlarmSMSReceiver

com.truecaller.action.schedule_sms

com.truecaller.credit.app.alarm.CreditAlarmLocReceiver

com.truecaller.action.schedule_loc_afternoon
com.truecaller.action.schedule_loc_late_night

com.truecaller.insights.reminders.receiver.InsightsReminderActionReceiver

com.truecaller.insights.reminders.action.deeplink
com.truecaller.insights.reminders.action.concrete

com.truecaller.insights.reminders.receiver.BillReminderReceiver

com.truecaller.insights.reminders.alarm.type_bill_reminder

com.truecaller.insights.reminders.receiver.ReminderBootReceiver

android.intent.action.BOOT_COMPLETED

com.truecaller.sdk.push.SdkActionReceiver

com.truecaller.sdk.web_request_reject

com.truecaller.flashsdk.receiver.ActionReceiver

com.truecaller.flashsdk.receiver.ACTION_DISMISS
com.truecaller.flashsdk.receiver.ACTION_CALL_PHONE
com.truecaller.flashsdk.receiver.ACTION_CALL_PHONE_CALL_ME
com.truecaller.flashsdk.receiver.ACTION_DISMISS_SILENTLY
com.truecaller.flashsdk.receiver.ACTION_FLASH
com.truecaller.flashsdk.PAYMENT_REQUEST

com.truecaller.flashsdk.receiver.PhoneStateReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.freshchat.consumer.sdk.receiver.FreshchatReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.LOCALE_CHANGED
android.intent.action.MY_PACKAGE_REPLACED

com.freshchat.consumer.sdk.receiver.FreshchatNetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.razorpay.RzpTokenReceiver

rzp.device_token.share

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

Services

com.truecaller.callrecording.service.TrueAccessibilityService

android.accessibilityservice.AccessibilityService

com.truecaller.callerid.callstate.TruecallerCallScreeningService

android.telecom.CallScreeningService

com.truecaller.notifications.NotificationHandlerService

android.service.notification.NotificationListenerService

com.truecaller.messaging.transport.sms.NoConfirmationSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.truecaller.calling.dialer.suggested_contacts.SuggestionsChooserTargetService

android.service.chooser.ChooserTargetService

com.truecaller.fcm.FcmMessageListenerService

com.google.firebase.MESSAGING_EVENT

com.truecaller.push.HuaweiMessageService

com.huawei.push.action.MESSAGING_EVENT

com.truecaller.incallui.service.InCallUIService

android.telecom.InCallService

com.truecaller.voip.callconnection.VoipCallConnectionService

android.telecom.ConnectionService

com.clevertap.android.sdk.pushnotification.CTNotificationIntentService

com.clevertap.PUSH_EVENT

com.clevertap.pushtemplates.PTNotificationIntentService

com.clevertap.PT_PUSH_EVENT

com.truecaller.common.account.TruecallerAccountAuthenticatorService

android.accounts.AccountAuthenticator

com.clevertap.android.sdk.pushnotification.amp.CTBackgroundIntentService

com.clevertap.BG_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

Android Permissions

Truecaller.apk

Permissions

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.READ_PROFILE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.MMS_SEND_OUTBOX_MSG

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.FOREGROUND_SERVICE

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.DISABLE_KEYGUARD

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

com.android.vending.BILLING

com.truecaller.permission.USE_NUMBER_SERVICE

com.truecaller.permission.ENHANCED_NOTIFICATION

com.miui.mediaeditor.permission.CROP

android.permission.USE_FULL_SCREEN_INTENT

android.permission.BLUETOOTH

com.truecaller.permission.SDK_ACTION_HANDLER

com.truecaller.permission.ACTION_HANDLER

android.permission.RECORD_AUDIO

Sharing

General

Malware Config

Extracted

Signatures

Files

com.truecaller

com.truecaller.ui.TruecallerInit

Activities

com.truecaller.ui.TruecallerInit

com.truecaller.ui.ContactsActivity

com.truecaller.messaging.MessagesActivity

com.truecaller.messaging.GoogleActionsActivity

com.truecaller.deeplink.DeepLinkHandlerActivity

com.truecaller.messaging.sharing.SharingActivity

com.truecaller.messaging.conversation.ConversationActivity

com.truecaller.sdk.ConfirmProfileActivity

com.truecaller.sdk.FullScreenConfirmActivity

com.truecaller.sdk.BottomSheetConfirmProfileActivity

com.truecaller.sdk.oAuth.view.consentScreen.BottomSheetOAuthActivity

com.facebook.CustomTabActivity

com.razorpay.CheckoutActivity

com.google.android.gms.appinvite.PreviewActivity

Permissions

Receivers

com.truecaller.service.Receiver

com.truecaller.service.AccountsChangedReceiver

com.truecaller.service.BootReceiver

com.truecaller.service.WidgetListProvider

com.truecaller.util.CallMonitoringReceiver

com.truecaller.util.RingerModeChangedReceiver

com.truecaller.util.ScreenUnlockedBroadcastReceiver

com.truecaller.messaging.transport.sms.SmsReceiver

com.truecaller.messaging.transport.mms.MmsWapPushDeliverReceiver

com.truecaller.messaging.transport.mms.MmsStatusReceiver

com.truecaller.fcm.DelayedPushReceiver

com.appsflyer.MultipleInstallBroadcastReceiver

com.truecaller.analytics.InstallReferrerReceiver

com.truecaller.presence.PresenceSchedulerReceiver

com.truecaller.bizmon.AppUpdateReceiver

com.truecaller.credit.app.alarm.CreditAlarmBootReceiver

com.truecaller.credit.app.alarm.CreditAlarmSMSReceiver

com.truecaller.credit.app.alarm.CreditAlarmLocReceiver

com.truecaller.insights.reminders.receiver.InsightsReminderActionReceiver

com.truecaller.insights.reminders.receiver.BillReminderReceiver

com.truecaller.insights.reminders.receiver.ReminderBootReceiver

com.truecaller.sdk.push.SdkActionReceiver

com.truecaller.flashsdk.receiver.ActionReceiver

com.truecaller.flashsdk.receiver.PhoneStateReceiver

com.freshchat.consumer.sdk.receiver.FreshchatReceiver

com.freshchat.consumer.sdk.receiver.FreshchatNetworkChangeReceiver

com.razorpay.RzpTokenReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

Services

com.truecaller.callrecording.service.TrueAccessibilityService

com.truecaller.callerid.callstate.TruecallerCallScreeningService

com.truecaller.notifications.NotificationHandlerService

com.truecaller.messaging.transport.sms.NoConfirmationSmsSendService

com.truecaller.calling.dialer.suggested_contacts.SuggestionsChooserTargetService

com.truecaller.fcm.FcmMessageListenerService

com.truecaller.push.HuaweiMessageService

com.truecaller.incallui.service.InCallUIService

com.truecaller.voip.callconnection.VoipCallConnectionService

com.clevertap.android.sdk.pushnotification.CTNotificationIntentService

com.clevertap.pushtemplates.PTNotificationIntentService

com.truecaller.common.account.TruecallerAccountAuthenticatorService

com.clevertap.android.sdk.pushnotification.amp.CTBackgroundIntentService

com.google.firebase.messaging.FirebaseMessagingService

com.huawei.hms.support.api.push.service.HmsMsgService

Android Permissions