Analysis
-
max time kernel
119s -
max time network
125s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
08-08-2024 13:59
Behavioral task
behavioral1
Sample
d9184915a0938415dd049e01166fb8bd.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
d9184915a0938415dd049e01166fb8bd.apk
Resource
android-x64-20240624-en
General
-
Target
d9184915a0938415dd049e01166fb8bd.apk
-
Size
6.3MB
-
MD5
d9184915a0938415dd049e01166fb8bd
-
SHA1
6a150fd56b2c410eeb57c7e77f2e0d6a1877a89e
-
SHA256
2828129f205faa2a8a3cc81a8fcbaa1a0e537c89f849aecb22f36a9b0076c3af
-
SHA512
050e409fb45778827413a4e768671dae9eb79157a794b5d103fa3e653afef10c35aa5da018cacda2ef2b5cb5ac6e418486b5d1969fe9597a6d38cd37791cb151
-
SSDEEP
98304:zxsag1f817EzbLSBtHNDgUaoyvnSTR9KZ6ccL2wpk80GXEeYv1QYn1Jx3a:zif2EzmdWoSSbW65lp90bZfx3a
Malware Config
Signatures
-
AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo zoq.bvzkkmqixlicfeygwl.tpkosgtwopmjzahv -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver zoq.bvzkkmqixlicfeygwl.tpkosgtwopmjzahv