Overview

overview

10

Static

static

10

bb00255832...5a.apk

android-9-x86

10

bb00255832...5a.apk

android-10-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb00255832f54bf47641388c70c7e75a.apk

  • Size

    7.0MB

  • MD5

    bb00255832f54bf47641388c70c7e75a

  • SHA1

    9cf0b0131a0339178a8ef07b2efb9ad9c0670d67

  • SHA256

    1b21a43d31aea1a47004ef97de8e2bacf9a1a2629c2b47ac5bef80446028d28e

  • SHA512

    5e7a80617d27cdc2d1b85432f5d45accab20d6111ef92be99f3ddd2da90129cadb568f2af036ec271a12aa803dac2a0161ff818985edd48aaaaf6cdfb081bc4f

  • SSDEEP

    98304:qAgJmFyqhu3nPLVyk+LgS8/1jERmjy5h7dM9/F4VCXMhHYJ6axaoscbYUM/Kr2aW:6ihu38vsHRER5D5MtKVMooscb7xBW

Score
10/10
axbanker

Malware Config

Extracted

Family

axbanker

C2

https://icicistore.website/api/user/step2

https://newax-d7dc6-default-rtdb.firebaseio.com

Signatures

  • Axbanker family
    axbanker
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • bb00255832f54bf47641388c70c7e75a.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.rewards.icicistore

    com.rewards.icicistore.SplashActivity


Android Permissions

bb00255832f54bf47641388c70c7e75a.apk

Permissions

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.INTERNET

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_SECURE_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.BIND_ACCESSIBILITY_SERVICE

com.rewards.icicistore.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION