General

  • Target

    57f09d028b4109a3f26a642db3482abb.apk

  • Size

    12.4MB

  • MD5

    57f09d028b4109a3f26a642db3482abb

  • SHA1

    0f180eb5ea66003c44e56db38670bb67d47f7873

  • SHA256

    f2dc7a0b72e501054f0e4d13d324e33d79b720927b871b3354e0e4db6127f34e

  • SHA512

    7d21460880a58ec181d282c60f767cbb0a29eadcd5861e8cec98c144cee0894953275532dcd8a1d7f40a87db1471ade0ffeb07f692c108c22135ac42b6470b64

  • SSDEEP

    393216:og/EJnvl3EfetkFnthNdxcw95JMm+KRD4:og/knvlUfetkRDxNPumr14

Score
10/10

Malware Config

Extracted

Family

axbanker

C2

https://icicirdm.com/api/user/step2

Signatures

  • Axbanker family
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • 57f09d028b4109a3f26a642db3482abb.apk
    .apk android arch:arm64 arch:x64 arch:x86 arch:arm

    com.rewards.officialpoint

    com.rewards.officialpoint.SplashActivity


Android Permissions

57f09d028b4109a3f26a642db3482abb.apk

Permissions

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.INTERNET

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.WRITE_SECURE_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.BIND_ACCESSIBILITY_SERVICE

com.rewards.officialpoint.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION