General

  • Target
    91daa704e74d61817ee1bf5ae02217b68fc352158c73e271f6a8f6295e3e9a8b.bin
  • Size 3.4MB
  • Sample240620-3j6dasselc
  • SHA256 91daa704e74d61817ee1bf5ae02217b68fc352158c73e271f6a8f6295e3e9a8b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • axbanker

C2
  • https://icotot-81e9f-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 2 IoCs

File Explorer

  • 91daa704e74d61817ee1bf5ae02217b68fc352158c73e271f6a8f6295e3e9a8b.bin
    .apk 3.4MB

91daa704e74d61817ee1bf5ae02217b68fc352158c73e271f6a8f6295e3e9a8b.bin

  • SHA256 91daa704e74d61817ee1bf5ae02217b68fc352158c73e271f6a8f6295e3e9a8b
  • MD5 SHA1 SHA512 SSDEEP
hello.uwer.hello.hello.google.is.the.best

Android Permissions

91daa704e74d61817ee1bf5ae02217b68fc352158c73e271f6a8f6295e3e9a8b.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE