Resubmissions

28/06/2024, 12:34

240628-pr7z7szcka10

27/06/2024, 15:01

240627-sdwxkawgla10

General

  • Target
    9a35498a63f6fcc8586618770c54a037.apk
  • Size 4.7MB
  • Sample240627-sdwxkawgla
  • SHA256 1eb8a431cce2d2a600f652067fe8d2e4a5df57f340e99cbd4aab38ef138571e2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • axbanker

C2
  • https://pntedgy.com/api/user/step1

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 4 IoCs

File Explorer

  • 9a35498a63f6fcc8586618770c54a037.apk
    .apk 4.7MB

9a35498a63f6fcc8586618770c54a037.apk

  • SHA256 1eb8a431cce2d2a600f652067fe8d2e4a5df57f340e99cbd4aab38ef138571e2
  • MD5 SHA1 SHA512 SSDEEP
com.mxtjech.videoplayers

Android Permissions

9a35498a63f6fcc8586618770c54a037.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.mxtjech.videoplayers.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION