General

  • Target

    3576766d992b7c33538a39ae246dcdde.apk

  • Size

    7.0MB

  • Sample

    250221-jaf79swmcy

  • MD5

    3576766d992b7c33538a39ae246dcdde

  • SHA1

    7141d8f16a509cdcf0c8ad20e0cce321af094cb3

  • SHA256

    aa359e67e5ad3fd36d9487b30fb08d7a47d66dae31edc7c4f32cdb626bc3228f

  • SHA512

    4bdc5acf901e568c5c64d099bc5c2b4d7d9e770e649b1876305b4420f2a0044c3f4c0669306b7eefbdb131dec9c9d865bb34d6194087d6f62c36b5c849fd6965

  • SSDEEP

    196608:LfL/hEh5MF+rrAMwv2IieF6RoEmLpolMYCF:nivMInAMwvJieF6K3LiM9

Malware Config

Extracted

Family

axbanker

C2

https://icstoreapp.co.in/index.php/api/user/step3

https://newax-d7dc6-default-rtdb.firebaseio.com

Targets

    • Target

      3576766d992b7c33538a39ae246dcdde.apk

    • Size

      7.0MB

    • MD5

      3576766d992b7c33538a39ae246dcdde

    • SHA1

      7141d8f16a509cdcf0c8ad20e0cce321af094cb3

    • SHA256

      aa359e67e5ad3fd36d9487b30fb08d7a47d66dae31edc7c4f32cdb626bc3228f

    • SHA512

      4bdc5acf901e568c5c64d099bc5c2b4d7d9e770e649b1876305b4420f2a0044c3f4c0669306b7eefbdb131dec9c9d865bb34d6194087d6f62c36b5c849fd6965

    • SSDEEP

      196608:LfL/hEh5MF+rrAMwv2IieF6RoEmLpolMYCF:nivMInAMwvJieF6K3LiM9

    • AxBanker

      AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.

    • Axbanker family

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks