General

  • Target

    ICICI.apk

  • Size

    6.6MB

  • MD5

    da495b745010c2a76b32068c97a97f1e

  • SHA1

    ba9984a0055923e73d85d3dd3a7c8fcd2981ec0d

  • SHA256

    e2ec88490db6ce8cfe986d6001317b6b29087a719398f37d33e06dd7d9b3b446

  • SHA512

    6708447a924865500e9756a0ebe8cd2a4fcc7a877cb3931cf80a4bb414c6c7b68f5cdf338670869fd73c36775fcf2401bcb402b14c9c070d11d5a8f3ca5b6fd5

  • SSDEEP

    98304:BS026zqPsE7Eq4YH9VZUSKqQv7YhDETQTdJagl/Kf5C6h70ahQ2aoOJ3M/KrOpCe:xL6EESpv7PTANKBC61vCToOJaCe

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://myapponline.in/api/user/step3

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • ICICI.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.rewards.icicicardaapp

    com.rewards.icicicardaapp.SplashActivity


Android Permissions

ICICI.apk

Permissions

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_SECURE_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.BIND_ACCESSIBILITY_SERVICE

com.rewards.icicicardaapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION