General

  • Target

    bc940641035dd13d692a1926753cf8ca.apk

  • Size

    6.1MB

  • MD5

    bc940641035dd13d692a1926753cf8ca

  • SHA1

    c3a5af64d0fbad4bae256daa3443a52821825bb3

  • SHA256

    d7fbc1e2c1eeaf98bfeb664d115dc82b7415ccbf1805902da7f0ef31cd8cb2d4

  • SHA512

    046433961bec16a098fca6d5af5ba820c43a50187753075e52aba2f1a1a5be5496a3afc53c26599eef7b642f160adf1bef19d6379f819434d734ec71b682d604

  • SSDEEP

    98304:7ju9Cy3aaoVq59w+Gvls8uOz3QS5SdOw+dZABNKaoUP3EsrsKo:7ju9C8aN8nGPgSX/ZABJoUxo

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://iciciapp.co/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 1 IoCs

Files

  • bc940641035dd13d692a1926753cf8ca.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.rewards.iciciapp

    com.rewards.iciciapp.SplashActivity


Android Permissions

bc940641035dd13d692a1926753cf8ca.apk

Permissions

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE