General

  • Target

    d7584a2d7973bf891c292569da62bc0b1259bf0f38fb7c9b5ab319d40be99f3a.bin

  • Size

    2.2MB

  • MD5

    e33fbb181f5823cb588844b08bf0a63c

  • SHA1

    a2d1bb9a04c188af0dfcea9a9e558cd9f2e760b3

  • SHA256

    d7584a2d7973bf891c292569da62bc0b1259bf0f38fb7c9b5ab319d40be99f3a

  • SHA512

    06cefea2abddfe3e9e6eb3b386a922a124573e75199fb25390f30d81d5b4585f755f355caa1f304a6f471166bc0bef0187bbd31c922286d8e67655cf12538b4b

  • SSDEEP

    49152:cPEZz+OrKSxlubRZOPeyPpNtttttttJd8yRDErpEji23NnYVxkS:cPEZyuKelOM98yNji23NAxB

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://au-ka-6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 1 IoCs

Files

  • d7584a2d7973bf891c292569da62bc0b1259bf0f38fb7c9b5ab319d40be99f3a.bin
    .apk android

    dcom.jhf56.j8wj

    dcom.jhf56.j8wj.MainActivity


Android Permissions

d7584a2d7973bf891c292569da62bc0b1259bf0f38fb7c9b5ab319d40be99f3a.bin

Permissions

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

dcom.jhf56.j8wj.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION