Extracted

Extracted

• • Target

    7970f77d8abcfbbc16157d92e25b72a0924af067afec4b41be8d64df9d94bbd3

  • Size

    2.4MB

  • MD5

    1f0e4bab258a2d3f5bc1148c7e90558f

  • SHA1

    906b985c2826b0a9f8a7617a7c5305a0a9c7e742

  • SHA256

    7970f77d8abcfbbc16157d92e25b72a0924af067afec4b41be8d64df9d94bbd3

  • SHA512

    9ce0b61ef0cd95ab29a11ebe12676ba2fb02dfff3acf929ff2930f94b5ba260cd383739ef7e45a94c41d45c1fd3d3e235f3182e3fafbe2fc525caf6712c63123

  • SSDEEP

    49152:2BQO2V821lTHU/jkkfLKKW2CL9WPn+PMlhgQA0sp33wYzTG:NZaaTHmjk0LKKW9L9W2AhgxHp33wYzTG

  Score

  10^/10

  ginpmp51bankerinfostealertrojanevasion

  • Ginp

    Ginp is an android banking trojan first seen in mid 2019.

    bankertrojaninfostealerginp

  • Makes use of the framework's Accessibility service.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    banker

  • Acquires the wake lock.

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Removes a system notification.

    evasion
  behavioral1behavioral2behavioral3