General
-
Target
d396e3957d97f614588e8feab010802d.apk
-
Size
11.1MB
-
Sample
250223-rbjc1s1mar
-
MD5
d396e3957d97f614588e8feab010802d
-
SHA1
44b2ac18cc6a684a2ee04dc608ebd9cfbbe54ff8
-
SHA256
21c78356d6f0385f18846e62fb1b19d5eea93079344273d386c147e6bba974ae
-
SHA512
45dff9a9dd9141efa330a342f8a80a2fd7b62ae8d53e97df2400273b365c04d9a4f3b5040b0558c4bb4ba3eed1337bd64c2543793e42da42693751313b261fe4
-
SSDEEP
196608:l9xdCvDmAcrzSt/M6QZSDjim26Vbl3sEJbv0JzNkop1hg3:RsriSt/gZSDjn3Hxv0JzNp1hS
Behavioral task
behavioral1
Sample
d396e3957d97f614588e8feab010802d.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral2
Sample
d396e3957d97f614588e8feab010802d.apk
Resource
android-33-x64-arm64-20240624-en
Malware Config
Extracted
axbanker
https://ajaychnapp-default-rtdb.firebaseio.com
https://geticapp.com/api/user/step2
Targets
-
-
Target
d396e3957d97f614588e8feab010802d.apk
-
Size
11.1MB
-
MD5
d396e3957d97f614588e8feab010802d
-
SHA1
44b2ac18cc6a684a2ee04dc608ebd9cfbbe54ff8
-
SHA256
21c78356d6f0385f18846e62fb1b19d5eea93079344273d386c147e6bba974ae
-
SHA512
45dff9a9dd9141efa330a342f8a80a2fd7b62ae8d53e97df2400273b365c04d9a4f3b5040b0558c4bb4ba3eed1337bd64c2543793e42da42693751313b261fe4
-
SSDEEP
196608:l9xdCvDmAcrzSt/M6QZSDjim26Vbl3sEJbv0JzNkop1hg3:RsriSt/gZSDjn3Hxv0JzNp1hS
-
AxBanker
AxBanker is an Android banking trojan that targets bank customers information distributed through fake bank applications.
-
Axbanker family
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-