Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7e39d98a97b9ffdda3251148ce6aabdd.apk

  • Size

    15.0MB

  • MD5

    7e39d98a97b9ffdda3251148ce6aabdd

  • SHA1

    76964b9f2ec5018ce5ab268608235bd4cbd79873

  • SHA256

    da78aa845bc87543786ba89f6fb707e0c7ea433cef161b0cb53f039ce9909565

  • SHA512

    a522b75f871cf7a32526e66a5f932fda9d0e489aa2e293948a32278d517e896f2101e2edae89b5224db9c860ff4ced5bccdb051c10dbb6ae648f9280fd00c457

  • SSDEEP

    393216:ziT2xVikSMGYOpmD98dLKKtborzTN5sPI:mKxU6Op1ZEzb

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 3 IoCs

Files

  • 7e39d98a97b9ffdda3251148ce6aabdd.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.playrix.donow

    com.playrix.donow.SplashActivity


  • origin.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.playrix.donow

    com.playrix.donow.SplashActivity


Android Permissions

7e39d98a97b9ffdda3251148ce6aabdd.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.playrix.donow.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION