axbanker | e0aa0e7933325b4e5d923e1e2f809048bd641307c01d0e8846733f9dc298a5ef

Analysis

max time kernel
146s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
19/01/2025, 13:22

Target

5c69e39a507887077cb47262ac5ee506.apk
Size

6.1MB
MD5

5c69e39a507887077cb47262ac5ee506
SHA1

bc545ed33f630ac714803e100e77f8f075e812de
SHA256

e0aa0e7933325b4e5d923e1e2f809048bd641307c01d0e8846733f9dc298a5ef
SHA512

6d277ad04ff9ff71e42182ccbe671c27b1fa8e08622046c65ee976d3f4183ba468569c0e681dde6ce9c0c44cef4e0db42959e3f8d989db5ba95b95e411db69c8
SSDEEP

98304:y//lm/IpNgLHX03zOLhnDrADpdwT7riFqxbdROGKKQGQJeKudKnjjaoVD3Esrsl:qpng+zOLhDcDnwmExb+K7Q/6Kn6oVu

Score

10^/10

AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
banker infostealer axbanker
Axbanker family
axbanker

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.icicxt.icstoreapp

com.icicxt.icstoreapp
1⤵
- Queries information about active data network
PID:4499

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact