General

  • Target

    AxisBank.apk

  • Size

    8.6MB

  • MD5

    9eccaf1a2199fd3f3ae3c93c7eac89bd

  • SHA1

    618505e335235e8e895c613c47f81762c573affa

  • SHA256

    7e06fd09a249c44c8f88282ce86b3ed721a175abe2e5e2fcef272d67d94191e6

  • SHA512

    2b55cebd7927ca513a35b67960127bd90aed9e5bfa392d8dc43bf028cc54a78d6edaace01ae4b1969afef518178ae4ead2a679265c3f62b96ba62e597dcd3da3

  • SSDEEP

    196608:PlGQc4YqJQqbBmas6YPx7pYaAJlZYzVVcJKJoC8PRsw0:PEQc4YqJQVf6Yl2flcXcQ+Fe

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://rewardpoint-25cc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 1 IoCs

Files

  • AxisBank.apk
    .apk android

    com.oneor.kt

    com.oneor.kt.MainActivity


Android Permissions

AxisBank.apk

Permissions

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.oneor.kt.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION