Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7e39d98a97b9ffdda3251148ce6aabdd.apk

  • Size

    15.0MB

  • Sample

    240828-pr3eqazfkm

  • MD5

    7e39d98a97b9ffdda3251148ce6aabdd

  • SHA1

    76964b9f2ec5018ce5ab268608235bd4cbd79873

  • SHA256

    da78aa845bc87543786ba89f6fb707e0c7ea433cef161b0cb53f039ce9909565

  • SHA512

    a522b75f871cf7a32526e66a5f932fda9d0e489aa2e293948a32278d517e896f2101e2edae89b5224db9c860ff4ced5bccdb051c10dbb6ae648f9280fd00c457

  • SSDEEP

    393216:ziT2xVikSMGYOpmD98dLKKtborzTN5sPI:mKxU6Op1ZEzb

Malware Config

Extracted

Family

axbanker

C2

https://newax-d7dc6-default-rtdb.firebaseio.com

Targets

    • Target

      7e39d98a97b9ffdda3251148ce6aabdd.apk

    • Size

      15.0MB

    • MD5

      7e39d98a97b9ffdda3251148ce6aabdd

    • SHA1

      76964b9f2ec5018ce5ab268608235bd4cbd79873

    • SHA256

      da78aa845bc87543786ba89f6fb707e0c7ea433cef161b0cb53f039ce9909565

    • SHA512

      a522b75f871cf7a32526e66a5f932fda9d0e489aa2e293948a32278d517e896f2101e2edae89b5224db9c860ff4ced5bccdb051c10dbb6ae648f9280fd00c457

    • SSDEEP

      393216:ziT2xVikSMGYOpmD98dLKKtborzTN5sPI:mKxU6Op1ZEzb

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

    • Requests dangerous framework permissions

    • Target

      origin.apk

    • Size

      14.8MB

    • MD5

      e5142d7c118a806b5a42bbc624f490fb

    • SHA1

      5bbe9a1737062f2bee84c838bce8948addcd9641

    • SHA256

      1b0a086993708469bd00801c6ec2669d6dcb8b2098f539759514712ceb6be230

    • SHA512

      c0e607abda9f1e02e480cc60945077a16211c9e831176dd7d9ad0a2df995ac54b18929b78a3e8013d75089cba3ebdf529c2d91a7e248ed7c7c95ff72adb8dc06

    • SSDEEP

      393216:GiT2xVikSMGYOpmD98dLKKtborzTN5sP5:VKxU6Op1ZEzE

    Score
    4/10

MITRE ATT&CK Mobile v15

Tasks