General

  • Target

    axiscard.apk

  • Size

    6.6MB

  • Sample

    240928-mk3e2a1ckj

  • MD5

    29faa1bdfbe9b3914437cb29e0310fcd

  • SHA1

    86c4c9a12e355391ed5cc9f8457bc23be32c90a7

  • SHA256

    3d7a1acffac734ee977b2a49bcc5fb9b0dbab86f6591153818689f8db0a86520

  • SHA512

    71c99d45dbb6508566298d91d56d153d7eda37720bee85e0b0c11506e0a7ceea1a66ededff087c71ac07c238d78e0f92f2d40f5d0182c657eebf6dfc703f6164

  • SSDEEP

    98304:pR7CGmodRMcWzCCNwyRC4sP/nsKSuWSmeaofmT0rTl3EsrMmw:nOo/7WOCPCNPPsKSuWS8okQT7w

Malware Config

Extracted

Family

axbanker

C2

https://axisstore.website/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Targets

    • Target

      axiscard.apk

    • Size

      6.6MB

    • MD5

      29faa1bdfbe9b3914437cb29e0310fcd

    • SHA1

      86c4c9a12e355391ed5cc9f8457bc23be32c90a7

    • SHA256

      3d7a1acffac734ee977b2a49bcc5fb9b0dbab86f6591153818689f8db0a86520

    • SHA512

      71c99d45dbb6508566298d91d56d153d7eda37720bee85e0b0c11506e0a7ceea1a66ededff087c71ac07c238d78e0f92f2d40f5d0182c657eebf6dfc703f6164

    • SSDEEP

      98304:pR7CGmodRMcWzCCNwyRC4sP/nsKSuWSmeaofmT0rTl3EsrMmw:nOo/7WOCPCNPPsKSuWS8okQT7w

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

MITRE ATT&CK Matrix

Tasks