General

  • Target

    3879d752ea8896c2ec215bec35f1ac2c.apk

  • Size

    5.4MB

  • MD5

    3879d752ea8896c2ec215bec35f1ac2c

  • SHA1

    149b357513a94102ebe85ca8e9e33af04bb4219e

  • SHA256

    71c8d909f8045ac13feffdcc29f58ed47577e595f89412922e846887fb7976cc

  • SHA512

    dec13c2d2e60766e3423fd4a8dc925f2d3cbde40f4ce5dbc6e41bdc9dc9cf68e92e316eaf78b8a6cd7a4d10820b3771c2ec25ed619f94a5858ba42d6dfc9fc4b

  • SSDEEP

    98304:b5d41M2zX7EsrjiXS0kdsJA5ckJQ+84ZGEbiw6q4zaxqrjHjSoh5j5PH80RXKM+n:bD41M2zqi0KsJA5m41bbX4EqLphXhKMQ

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://mainserviseawail.co.in/api/message.php/

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 4 IoCs

Files

  • 3879d752ea8896c2ec215bec35f1ac2c.apk
    .apk android

    com.example.new_bloack_done_pro

    com.example.new_bloack_done_pro.SplashActivity


Android Permissions

3879d752ea8896c2ec215bec35f1ac2c.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE