Analysis

  • max time kernel
    108s
  • max time network
    84s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    05/02/2025, 10:11

General

  • Target

    57f09d028b4109a3f26a642db3482abb.apk

  • Size

    12.4MB

  • MD5

    57f09d028b4109a3f26a642db3482abb

  • SHA1

    0f180eb5ea66003c44e56db38670bb67d47f7873

  • SHA256

    f2dc7a0b72e501054f0e4d13d324e33d79b720927b871b3354e0e4db6127f34e

  • SHA512

    7d21460880a58ec181d282c60f767cbb0a29eadcd5861e8cec98c144cee0894953275532dcd8a1d7f40a87db1471ade0ffeb07f692c108c22135ac42b6470b64

  • SSDEEP

    393216:og/EJnvl3EfetkFnthNdxcw95JMm+KRD4:og/knvlUfetkRDxNPumr14

Malware Config

Signatures

  • AxBanker

    AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

  • Axbanker family
  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.rewards.officialpoint
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4243

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.rewards.officialpoint/files/profileInstalled

    Filesize

    24B

    MD5

    f430518e92557f035577a98098018c3d

    SHA1

    6fc9aed03ad4feca3ddd9287e891b955940d2852

    SHA256

    5d35b3c39450694aefc1e062f4fb36c2b7f62d5379cc0c8adef091593369c0dc

    SHA512

    4a8f05d09f3a959d0451eaf9d09c4cf488ca3b7ab22fe2fdda41968608e9c68289636c39e5c5d287c1ae81cbac8b41143effdf07055aa0bf5de1a6ba697ebaa3

  • /data/data/com.rewards.officialpoint/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫

    Filesize

    2.8MB

    MD5

    ec45fa7d6e41a8894cebdcab08b0c56e

    SHA1

    b2066021a5cf461680ae72edea57c9b17806f7b3

    SHA256

    8f36e9ab21611eb5575a3033bf7c1b6859f2ae8487c6e7b18dabd70a7498d8bb

    SHA512

    3b3e63ccb8a8e20f6e76dc86342bfe35c4deb4916b4603d31d9a223cc697dc5e09c7a883659b7bb3ac20ebaccd8e36fe721cd75e5222a6ddcc2e8446381cc5ea

  • /data/data/com.rewards.officialpoint/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫/ۦۖ۫.

    Filesize

    8B

    MD5

    3683ebe28c7088d97ad8944c0a1721c8

    SHA1

    8fc1173fb5fb32640b4ac05df57ffd8513e80807

    SHA256

    a3f270e0896b06523804550b7e470e3a70c5a1220e72d812e493167f5fccd676

    SHA512

    0555907aee6688588b122332bde1befcf25f7bd3a523a141d5721e2a4e04a11ebcfaf5d1c900c500090c7031d774016330e0282a315ca18493a47e4977f39cdb

  • Anonymous-DexFile@0xf0b6e000-0xf0b6e294

    Filesize

    660B

    MD5

    b73652a224a725246c8ea8bafb3a1cec

    SHA1

    e70221a74d328059832bce103fbaf77bf176b833

    SHA256

    60556d177f75c3c4369f5e0e038390f0fee56f4f9adfe6321c47c0f792df9ea8

    SHA512

    85d1ea93fd0e2c8176fd32343749fba8a6ffc7546fc814890294bef8e8ab67bec8d727bd0f8e47165db672709467dddbc6d9965e5e5ba69fb5adaa952bc676b0

  • Anonymous-DexFile@0xf0c10000-0xf0c10288

    Filesize

    648B

    MD5

    2c53a1f3af0165f70f9b59452c4c1ff2

    SHA1

    0fb21627e69a51b48d55d68e0caaf8484ea83dbd

    SHA256

    dacba436288d43ec2568c903661e48cc326256aaf7ecdae505075522cb1595fc

    SHA512

    46f9f86ddc566b88bf3db00b4ac427a4e68ab26d17e3a94565c01953d7a611b2148e892d29aec6a2b6cacfa508fca82ee20b5078549b55195534b4b0418a4715

  • Anonymous-DexFile@0xf0d32000-0xf0d322f4

    Filesize

    756B

    MD5

    cd0bcb8d366da378f66f4e884ef029f4

    SHA1

    67b41e78d5c58003fa0774e923131e5925673813

    SHA256

    91e369d3953d351c0a141d449c60bd43f0c06b091fc8b2be6f19f4d4fd716d0f

    SHA512

    923292c15f36004c3c519ab756ed190cbd347f74b88e49ce3d3a5172359dbabe6f5d2db36a76cec102cd6363df814cdce1bc5ee0ea18adf6cd0e48ff7b39917e