General
-
Target
e394ff12c3cd2a050501e621f4fcb9ed.apk
-
Size
14.8MB
-
Sample
250223-qt2rmsyrg1
-
MD5
e394ff12c3cd2a050501e621f4fcb9ed
-
SHA1
e74aac9dfb7f4fe5303d7fe7ce152785876af868
-
SHA256
7b03b91887dfed7fbbd931f8ccea337926b8d55e675f4d15edfec6f0c7b960aa
-
SHA512
a18c21747590251e6e8fa5093fb8186857a8d66db9da7deef54349e55d496c7d2287238b801df375ca5e3c7f900c63f53e03ac2ee7059ac29036339dd144bd84
-
SSDEEP
393216:5J9uB2qd5SEgR0vMeVcJVzjoJlLLYFPEQZDqP9:5J9uA2AEgR0RVEVz0JlLCE0DqV
Behavioral task
behavioral1
Sample
e394ff12c3cd2a050501e621f4fcb9ed.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral2
Sample
e394ff12c3cd2a050501e621f4fcb9ed.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
app.apk
Resource
android-33-x64-arm64-20240624-en
Malware Config
Extracted
axbanker
https://ajaychnapp-default-rtdb.firebaseio.com
https://geticapp.com/api/user/step2
Targets
-
-
Target
e394ff12c3cd2a050501e621f4fcb9ed.apk
-
Size
14.8MB
-
MD5
e394ff12c3cd2a050501e621f4fcb9ed
-
SHA1
e74aac9dfb7f4fe5303d7fe7ce152785876af868
-
SHA256
7b03b91887dfed7fbbd931f8ccea337926b8d55e675f4d15edfec6f0c7b960aa
-
SHA512
a18c21747590251e6e8fa5093fb8186857a8d66db9da7deef54349e55d496c7d2287238b801df375ca5e3c7f900c63f53e03ac2ee7059ac29036339dd144bd84
-
SSDEEP
393216:5J9uB2qd5SEgR0vMeVcJVzjoJlLLYFPEQZDqP9:5J9uA2AEgR0RVEVz0JlLCE0DqV
Score1/10 -
-
-
Target
app.apk
-
Size
11.1MB
-
MD5
d396e3957d97f614588e8feab010802d
-
SHA1
44b2ac18cc6a684a2ee04dc608ebd9cfbbe54ff8
-
SHA256
21c78356d6f0385f18846e62fb1b19d5eea93079344273d386c147e6bba974ae
-
SHA512
45dff9a9dd9141efa330a342f8a80a2fd7b62ae8d53e97df2400273b365c04d9a4f3b5040b0558c4bb4ba3eed1337bd64c2543793e42da42693751313b261fe4
-
SSDEEP
196608:l9xdCvDmAcrzSt/M6QZSDjim26Vbl3sEJbv0JzNkop1hg3:RsriSt/gZSDjn3Hxv0JzNp1hS
-
AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
-
Axbanker family
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-