Resubmissions

02-09-2024 11:56

240902-n35tjszbml 10

02-09-2024 11:44

240902-nv6e4szakp 10

General

  • Target

    0c9bb0ea6b43a394055b1ca02473b4ab.apk

  • Size

    6.1MB

  • Sample

    240902-n35tjszbml

  • MD5

    0c9bb0ea6b43a394055b1ca02473b4ab

  • SHA1

    7b666659317b748f82de590a5a2bfedac822a75e

  • SHA256

    b0736f84e9781e4a99736668332195d211cf9538442218e5e53c373d3cfbb8e9

  • SHA512

    de2d02111444471be89bbed0149e57db627169971eae548a06d6f69dedf3290fd50206342e1b29eb207f1213717ac9ea5a4ce23d0a86a0c8e4497983fdc41f1a

  • SSDEEP

    98304:4ZLhgufPim+3L2d73IslFauDrKppyVcLmmZrQYeZpKaoUE3EsrsT:4VfPVcL673IslF3IpyqLnZrQNZFoUn

Malware Config

Extracted

Family

axbanker

C2

https://cardiciciapply.co.in/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Targets

    • Target

      0c9bb0ea6b43a394055b1ca02473b4ab.apk

    • Size

      6.1MB

    • MD5

      0c9bb0ea6b43a394055b1ca02473b4ab

    • SHA1

      7b666659317b748f82de590a5a2bfedac822a75e

    • SHA256

      b0736f84e9781e4a99736668332195d211cf9538442218e5e53c373d3cfbb8e9

    • SHA512

      de2d02111444471be89bbed0149e57db627169971eae548a06d6f69dedf3290fd50206342e1b29eb207f1213717ac9ea5a4ce23d0a86a0c8e4497983fdc41f1a

    • SSDEEP

      98304:4ZLhgufPim+3L2d73IslFauDrKppyVcLmmZrQYeZpKaoUE3EsrsT:4VfPVcL673IslF3IpyqLnZrQNZFoUn

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks