General

  • Target

    axiscard.apk

  • Size

    6.6MB

  • MD5

    29faa1bdfbe9b3914437cb29e0310fcd

  • SHA1

    86c4c9a12e355391ed5cc9f8457bc23be32c90a7

  • SHA256

    3d7a1acffac734ee977b2a49bcc5fb9b0dbab86f6591153818689f8db0a86520

  • SHA512

    71c99d45dbb6508566298d91d56d153d7eda37720bee85e0b0c11506e0a7ceea1a66ededff087c71ac07c238d78e0f92f2d40f5d0182c657eebf6dfc703f6164

  • SSDEEP

    98304:pR7CGmodRMcWzCCNwyRC4sP/nsKSuWSmeaofmT0rTl3EsrMmw:nOo/7WOCPCNPPsKSuWS8okQT7w

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://axisstore.website/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 3 IoCs

Files

  • axiscard.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.website.axisstore

    com.website.axisstore.SplashActivity


Android Permissions

axiscard.apk

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE