axbanker | 71c8d909f8045ac13feffdcc29f58ed47577e595f89412922e846887fb7976cc

Analysis

max time kernel
59s
max time network
67s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
12/08/2024, 16:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3879d752ea8896c2ec215bec35f1ac2c.apk
Size

5.4MB
MD5

3879d752ea8896c2ec215bec35f1ac2c
SHA1

149b357513a94102ebe85ca8e9e33af04bb4219e
SHA256

71c8d909f8045ac13feffdcc29f58ed47577e595f89412922e846887fb7976cc
SHA512

dec13c2d2e60766e3423fd4a8dc925f2d3cbde40f4ce5dbc6e41bdc9dc9cf68e92e316eaf78b8a6cd7a4d10820b3771c2ec25ed619f94a5858ba42d6dfc9fc4b
SSDEEP

98304:b5d41M2zX7EsrjiXS0kdsJA5ckJQ+84ZGEbiw6q4zaxqrjHjSoh5j5PH80RXKM+n:bD41M2zqi0KsJA5m41bbX4EqLphXhKMQ

Score

10^/10

axbanker banker infostealer persistence

Malware Config

Signatures

AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
banker infostealer axbanker

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.new_bloack_done_pro

com.example.new_bloack_done_pro
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4207

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads