Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0c9bb0ea6b...ab.apk

android-9-x86

4

0c9bb0ea6b...ab.apk

android-13-x64

1

Resubmissions

02/09/2024, 11:56

240902-n35tjszbml 10

02/09/2024, 11:44

240902-nv6e4szakp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c9bb0ea6b43a394055b1ca02473b4ab.apk

  • Size

    6.1MB

  • MD5

    0c9bb0ea6b43a394055b1ca02473b4ab

  • SHA1

    7b666659317b748f82de590a5a2bfedac822a75e

  • SHA256

    b0736f84e9781e4a99736668332195d211cf9538442218e5e53c373d3cfbb8e9

  • SHA512

    de2d02111444471be89bbed0149e57db627169971eae548a06d6f69dedf3290fd50206342e1b29eb207f1213717ac9ea5a4ce23d0a86a0c8e4497983fdc41f1a

  • SSDEEP

    98304:4ZLhgufPim+3L2d73IslFauDrKppyVcLmmZrQYeZpKaoUE3EsrsT:4VfPVcL673IslF3IpyqLnZrQNZFoUn

Score
10/10
axbanker

Malware Config

Extracted

Family

axbanker

C2

https://cardiciciapply.co.in/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
    axbanker
  • Requests dangerous framework permissions 1 IoCs

Files

  • 0c9bb0ea6b43a394055b1ca02473b4ab.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.nowopen.cardiciciapply

    com.nowopen.cardiciciapply.SplashActivity


Android Permissions

0c9bb0ea6b43a394055b1ca02473b4ab.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE