Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    axiscard.apk

  • Size

    6.6MB

  • MD5

    89536be9a5af9887e541d208377bc3bc

  • SHA1

    a1a7d53864f9f687549ef5b82a3b30f9f1efb565

  • SHA256

    0168280da1ff7c88dad405f2cd1f0ff6af7958dcffe124872cc1b9cf80621b25

  • SHA512

    ebd9af347db66b6059c776be5370226a2bb4be82498f9f4fdbd41fc19d6315ea9e1483191c73b8c66dd58d71023564f937748883f08e7d2874c6ee90b27e1098

  • SSDEEP

    98304:+jl36e6KHbueL/ul5bQAgOQ9bfD08A5p0KWefVzQmeaofmT0rTv3EsrMn:+8G7ueL/CbQAgOEbm5q1etzQ8okQTO

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://newax-d7dc6-default-rtdb.firebaseio.com

https://redeemapp.in/api/user/step2

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 3 IoCs

Files

  • axiscard.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.website.axisclaimapp

    com.website.axisclaimapp.SplashActivity


Android Permissions

axiscard.apk

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE