Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4ef824a4d877bd5387489c4ef025df31.apk

  • Size

    6.1MB

  • MD5

    4ef824a4d877bd5387489c4ef025df31

  • SHA1

    56e6105a2e4abd42d91af68f1d71f7d62e6624be

  • SHA256

    1d556e4aa3bc2ed163350908bfeb608a65233ea373cf54b22726b39fecb3cb7d

  • SHA512

    09f1af7af9b3efc7bfca8ff77dbc6beca533808702b3d93dc6f51be9d75f53ee62a9f42b5691c57d297d26ee2062ffb2f1330b4346e012ea9313fee2b149fbd0

  • SSDEEP

    98304:y55P4cIZYS/uxnwvHNh/FfwEXyXNzmZmOUErVUl3JzjjaoV53EsrsH:yDPFIyS/LH1fAymAS3Jz6oV+

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icreardstt.co.in/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 8 IoCs

Files

  • 4ef824a4d877bd5387489c4ef025df31.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.gameram.gameramer

    com.gameram.gameramer.SplashActivity


Android Permissions

4ef824a4d877bd5387489c4ef025df31.apk

Permissions

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.INTERNET

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_SECURE_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.BIND_ACCESSIBILITY_SERVICE