General

  • Target

    04977adf97e13778670e49e8424212f0f7f0b74a38846597bce83c5af88e1712

  • Size

    96.4MB

  • MD5

    e2c2ae5d4181e82c2c8511aa3c573260

  • SHA1

    bc55e49227eb619229c7583d40514100c1877867

  • SHA256

    04977adf97e13778670e49e8424212f0f7f0b74a38846597bce83c5af88e1712

  • SHA512

    4651550ae57027ef3c4511a9195d9a349830dbe61b440a052ff0168e2161332793f50a47a67078b423f6a673f875a52e9e64465a913d914c82623165e02341fa

  • SSDEEP

    3145728:THfDwzvQgwXhessH6zD7ysCtmsigFxE8Oad:jf8jQgwXhessH6zJ9gQid

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://api-7040530283788474945-532393-default-rtdb.firebaseio.com

https://api-7040530283788474945-532393.firebaseio.com

Signatures

  • Axbanker family
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • 04977adf97e13778670e49e8424212f0f7f0b74a38846597bce83c5af88e1712
    .apk android

    ru.rostel

    ru.minsvyaz.coreproject.MainActivity


Android Permissions

04977adf97e13778670e49e8424212f0f7f0b74a38846597bce83c5af88e1712

Permissions

android.permission.DETECT_SCREEN_CAPTURE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.CALL_PHONE

android.permission.USE_BIOMETRIC

com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.NFC

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.POST_NOTIFICATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.VIBRATE

android.permission.USE_FINGERPRINT

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.FOREGROUND_SERVICE

ru.rostel.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE