General

  • Target

    7e434e0ac015c43b6431401033bd6247.apk

  • Size

    6.6MB

  • MD5

    7e434e0ac015c43b6431401033bd6247

  • SHA1

    cd3f976b9c15d4d700fd96beb2b67039bbc1e279

  • SHA256

    2852889764f32b24b1e2259df7099e11cee5985568935b8359ca132179b13915

  • SHA512

    02667c4f47e2682db3df9135af04fd91d08fcd8ffee501173b5df8347e0d0c4e00cdc04971e06353cc3f9ac542fad26ced17ad384aaf95a4a3a87744550acf46

  • SSDEEP

    98304:+jl36e6KHbueL/ul5bQAgOQ9bfD08A5p0KWefVzQmeaofmT0rTv3EsrMQ:+8G7ueL/CbQAgOEbm5q1etzQ8okQTh

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://newax-d7dc6-default-rtdb.firebaseio.com

https://redeemapp.in/api/user/step2

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 3 IoCs

Files

  • 7e434e0ac015c43b6431401033bd6247.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.website.axisclaimapp

    com.website.axisclaimapp.SplashActivity


Android Permissions

7e434e0ac015c43b6431401033bd6247.apk

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE