Extracted

• • Target

    31c1ae3e642515ca64656620f075e3ffd3258e9f

  • Size

    98KB

  • MD5

    2ba22b1922de68634d7729175c29bf55

  • SHA1

    31c1ae3e642515ca64656620f075e3ffd3258e9f

  • SHA256

    8b48c12522aad0a2125e71a08403e1c6590295de30a12b97e9c2404caba03d69

  • SHA512

    42bef73a04c222311754002ae412ff277b39f9cae26b73cffd1f0d765d3adfdcce761caba93f4a31ee1f767bb5ebfa7da55fe8ffe5b0b155c467d438b400de8d

  • SSDEEP

    3072:qfpK46Ft0qPtsxaQCb2SuT6mKOzJv7L0wH:qfk4feAyZJmKOzJjL0o

  Score

  8^/10

  evasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Registers a broadcast receiver at runtime (usually for listening for system events)

    persistence

  • Requests dangerous framework permissions

  behavioral1behavioral2behavioral3