General

  • Target

    5c69e39a507887077cb47262ac5ee506.apk

  • Size

    6.1MB

  • MD5

    5c69e39a507887077cb47262ac5ee506

  • SHA1

    bc545ed33f630ac714803e100e77f8f075e812de

  • SHA256

    e0aa0e7933325b4e5d923e1e2f809048bd641307c01d0e8846733f9dc298a5ef

  • SHA512

    6d277ad04ff9ff71e42182ccbe671c27b1fa8e08622046c65ee976d3f4183ba468569c0e681dde6ce9c0c44cef4e0db42959e3f8d989db5ba95b95e411db69c8

  • SSDEEP

    98304:y//lm/IpNgLHX03zOLhnDrADpdwT7riFqxbdROGKKQGQJeKudKnjjaoVD3Esrsl:qpng+zOLhDcDnwmExb+K7Q/6Kn6oVu

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icicxt.in/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
  • Requests dangerous framework permissions 8 IoCs

Files

  • 5c69e39a507887077cb47262ac5ee506.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.icicxt.icstoreapp

    com.icicxt.icstoreapp.SplashActivity


Android Permissions

5c69e39a507887077cb47262ac5ee506.apk

Permissions

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.INTERNET

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_SECURE_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.BIND_ACCESSIBILITY_SERVICE