Analysis

  • max time kernel
    122s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    29/11/2024, 09:15

General

  • Target

    bc940641035dd13d692a1926753cf8ca.apk

  • Size

    6.1MB

  • MD5

    bc940641035dd13d692a1926753cf8ca

  • SHA1

    c3a5af64d0fbad4bae256daa3443a52821825bb3

  • SHA256

    d7fbc1e2c1eeaf98bfeb664d115dc82b7415ccbf1805902da7f0ef31cd8cb2d4

  • SHA512

    046433961bec16a098fca6d5af5ba820c43a50187753075e52aba2f1a1a5be5496a3afc53c26599eef7b642f160adf1bef19d6379f819434d734ec71b682d604

  • SSDEEP

    98304:7ju9Cy3aaoVq59w+Gvls8uOz3QS5SdOw+dZABNKaoUP3EsrsKo:7ju9C8aN8nGPgSX/ZABJoUxo

Malware Config

Signatures

  • AxBanker

    AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

  • Axbanker family
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.rewards.iciciapp
    1⤵
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4957

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.rewards.iciciapp/cache/volley/-4335737051594840139

    Filesize

    1023B

    MD5

    36f7295c7965384af4b7491641d816ab

    SHA1

    1c540d150962510ad89f88a143bc25015728b1fa

    SHA256

    e2ecaadf5f750603f65a53a345a732041b6912fb0db7ebae195e72fe2b128eba

    SHA512

    0b23b0a44bfd9c570d8d48e92e8fc1c5fa4b360aec2b995ecef27e443fc1f5d9c7c2d336a42ac985c82eca8853d4af4695f7b2e8ccdd5c2d82e262959a529e8b

  • /data/data/com.rewards.iciciapp/cache/volley/-4335737051594840140

    Filesize

    1023B

    MD5

    49300a65d22b4f07b4756eecf6f2c718

    SHA1

    acbee26752d846e01b8d5a5ed3acbf5f3fee99c4

    SHA256

    09bcd75c75e7fc8049d20d89d2e33704032bd20826564fe63d7e289a25cd99dc

    SHA512

    656b3aec2d8fd1554233e878de65ea2a19e982af1e9cc5c959cb1a01540fe1095462e7d578d4a752ebd084b9dd4ed41f29c20aaecb114e19443dc6edaf25de4b