Analysis
-
max time kernel
108s -
max time network
84s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
05/02/2025, 10:11
Behavioral task
behavioral1
Sample
57f09d028b4109a3f26a642db3482abb.apk
Resource
android-x86-arm-20240624-en
General
-
Target
57f09d028b4109a3f26a642db3482abb.apk
-
Size
12.4MB
-
MD5
57f09d028b4109a3f26a642db3482abb
-
SHA1
0f180eb5ea66003c44e56db38670bb67d47f7873
-
SHA256
f2dc7a0b72e501054f0e4d13d324e33d79b720927b871b3354e0e4db6127f34e
-
SHA512
7d21460880a58ec181d282c60f767cbb0a29eadcd5861e8cec98c144cee0894953275532dcd8a1d7f40a87db1471ade0ffeb07f692c108c22135ac42b6470b64
-
SSDEEP
393216:og/EJnvl3EfetkFnthNdxcw95JMm+KRD4:og/knvlUfetkRDxNPumr14
Malware Config
Signatures
-
AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
-
Axbanker family
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process Anonymous-DexFile@0xf0d32000-0xf0d322f4 4243 com.rewards.officialpoint Anonymous-DexFile@0xf0c10000-0xf0c10288 4243 com.rewards.officialpoint Anonymous-DexFile@0xf0b6e000-0xf0b6e294 4243 com.rewards.officialpoint -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.rewards.officialpoint -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.rewards.officialpoint -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.rewards.officialpoint
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD5f430518e92557f035577a98098018c3d
SHA16fc9aed03ad4feca3ddd9287e891b955940d2852
SHA2565d35b3c39450694aefc1e062f4fb36c2b7f62d5379cc0c8adef091593369c0dc
SHA5124a8f05d09f3a959d0451eaf9d09c4cf488ca3b7ab22fe2fdda41968608e9c68289636c39e5c5d287c1ae81cbac8b41143effdf07055aa0bf5de1a6ba697ebaa3
-
Filesize
2.8MB
MD5ec45fa7d6e41a8894cebdcab08b0c56e
SHA1b2066021a5cf461680ae72edea57c9b17806f7b3
SHA2568f36e9ab21611eb5575a3033bf7c1b6859f2ae8487c6e7b18dabd70a7498d8bb
SHA5123b3e63ccb8a8e20f6e76dc86342bfe35c4deb4916b4603d31d9a223cc697dc5e09c7a883659b7bb3ac20ebaccd8e36fe721cd75e5222a6ddcc2e8446381cc5ea
-
Filesize
8B
MD53683ebe28c7088d97ad8944c0a1721c8
SHA18fc1173fb5fb32640b4ac05df57ffd8513e80807
SHA256a3f270e0896b06523804550b7e470e3a70c5a1220e72d812e493167f5fccd676
SHA5120555907aee6688588b122332bde1befcf25f7bd3a523a141d5721e2a4e04a11ebcfaf5d1c900c500090c7031d774016330e0282a315ca18493a47e4977f39cdb
-
Filesize
660B
MD5b73652a224a725246c8ea8bafb3a1cec
SHA1e70221a74d328059832bce103fbaf77bf176b833
SHA25660556d177f75c3c4369f5e0e038390f0fee56f4f9adfe6321c47c0f792df9ea8
SHA51285d1ea93fd0e2c8176fd32343749fba8a6ffc7546fc814890294bef8e8ab67bec8d727bd0f8e47165db672709467dddbc6d9965e5e5ba69fb5adaa952bc676b0
-
Filesize
648B
MD52c53a1f3af0165f70f9b59452c4c1ff2
SHA10fb21627e69a51b48d55d68e0caaf8484ea83dbd
SHA256dacba436288d43ec2568c903661e48cc326256aaf7ecdae505075522cb1595fc
SHA51246f9f86ddc566b88bf3db00b4ac427a4e68ab26d17e3a94565c01953d7a611b2148e892d29aec6a2b6cacfa508fca82ee20b5078549b55195534b4b0418a4715
-
Filesize
756B
MD5cd0bcb8d366da378f66f4e884ef029f4
SHA167b41e78d5c58003fa0774e923131e5925673813
SHA25691e369d3953d351c0a141d449c60bd43f0c06b091fc8b2be6f19f4d4fd716d0f
SHA512923292c15f36004c3c519ab756ed190cbd347f74b88e49ce3d3a5172359dbabe6f5d2db36a76cec102cd6363df814cdce1bc5ee0ea18adf6cd0e48ff7b39917e