axbanker | 7d5239a2800c04ba03e0d700fe506b60c89e1312f4bd46275ec4ca687280caf9

Analysis

max time kernel
67s
max time network
67s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
12/08/2024, 16:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2a9cabedd66f5ae92154079d9f5ff792.apk
Size

5.4MB
MD5

2a9cabedd66f5ae92154079d9f5ff792
SHA1

9a6ab3347e6c7f783e9fc3423f900ecde89330c4
SHA256

7d5239a2800c04ba03e0d700fe506b60c89e1312f4bd46275ec4ca687280caf9
SHA512

5fb247e7b4ad8d1c538dabe3bd1438550da07107812ec9bdfd95022f8a103c0d9a6313d5e8fdc99ea88659b6dc841881c1c10898b9d13dcda84cfce1694c16ef
SSDEEP

98304:q1DY+AOGVX7EsrjUKUFeedeB3PS51dDXwYhwp51mHLJKmIMD8ZwapJhj:q1E+3gcKUAed4PS51ZwYhwp/uJKmhAwA

Score

10^/10

axbanker banker infostealer persistence

Malware Config

Signatures

AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
banker infostealer axbanker

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.Ramteram.hoddies

com.Ramteram.hoddies
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...