Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6ffa89b4e2bfa275110c6823660f114c.apk

  • Size

    14.6MB

  • MD5

    6ffa89b4e2bfa275110c6823660f114c

  • SHA1

    4f620de841b1c52f81b626508a33c070b9fad009

  • SHA256

    1f133ecd4c50c1d3622b09c147fe9b7ccae8f2ed08a20a5c2741e3237354aa7e

  • SHA512

    8e8ea3b1aba6608b5fb26687a876d94d88a83034f747d8cd83acef0dc17739cc4fa93dfbbc4b9cf75705dfaccc35c3d78342a49416be2a859e7aeba05405ab5b

  • SSDEEP

    196608:oTjxDh6r5ltMcRcSQuYvFj3fboCQTJ+E2escyuRMb94xm0TrTZ99EVFdMSV:kxDhE5ltcRFjCJbtbYwzT3D98dLV

Score
10/10

Malware Config

Signatures

  • Axbanker family
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 3 IoCs

Files

  • 6ffa89b4e2bfa275110c6823660f114c.apk
    .apk android arch:arm64 arch:x86 arch:arm arch:x64

    com.playrix.donow

    com.playrix.donow.SplashActivity


Android Permissions

6ffa89b4e2bfa275110c6823660f114c.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.playrix.donow.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION