General

  • Target

    57f09d028b4109a3f26a642db3482abb.apk

  • Size

    12.4MB

  • Sample

    250205-l735eatkfm

  • MD5

    57f09d028b4109a3f26a642db3482abb

  • SHA1

    0f180eb5ea66003c44e56db38670bb67d47f7873

  • SHA256

    f2dc7a0b72e501054f0e4d13d324e33d79b720927b871b3354e0e4db6127f34e

  • SHA512

    7d21460880a58ec181d282c60f767cbb0a29eadcd5861e8cec98c144cee0894953275532dcd8a1d7f40a87db1471ade0ffeb07f692c108c22135ac42b6470b64

  • SSDEEP

    393216:og/EJnvl3EfetkFnthNdxcw95JMm+KRD4:og/knvlUfetkRDxNPumr14

Malware Config

Extracted

Family

axbanker

C2

https://icicirdm.com/api/user/step2

Targets

    • Target

      57f09d028b4109a3f26a642db3482abb.apk

    • Size

      12.4MB

    • MD5

      57f09d028b4109a3f26a642db3482abb

    • SHA1

      0f180eb5ea66003c44e56db38670bb67d47f7873

    • SHA256

      f2dc7a0b72e501054f0e4d13d324e33d79b720927b871b3354e0e4db6127f34e

    • SHA512

      7d21460880a58ec181d282c60f767cbb0a29eadcd5861e8cec98c144cee0894953275532dcd8a1d7f40a87db1471ade0ffeb07f692c108c22135ac42b6470b64

    • SSDEEP

      393216:og/EJnvl3EfetkFnthNdxcw95JMm+KRD4:og/knvlUfetkRDxNPumr14

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

    • Axbanker family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks