Extracted

• • Target
    31c1ae3e642515ca64656620f075e3ffd3258e9f
  • Size 98KB
  • SHA256 8b48c12522aad0a2125e71a08403e1c6590295de30a12b97e9c2404caba03d69
  • MD5 2ba22b1922de68634d7729175c29bf55
  • SHA1 31c1ae3e642515ca64656620f075e3ffd3258e9f
  • SHA512 42bef73a04c222311754002ae412ff277b39f9cae26b73cffd1f0d765d3adfdcce761caba93f4a31ee1f767bb5ebfa7da55fe8ffe5b0b155c467d438b400de8d
  • SSDEEP 3072:qfpK46Ft0qPtsxaQCb2SuT6mKOzJv7L0wH:qfk4feAyZJmKOzJjL0o
  • MD5 SHA1 SHA512 SSDEEP

  Score

  8^/10

  evasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Registers a broadcast receiver at runtime (usually for listening for system events)

    persistence

  • Requests dangerous framework permissions

  behavioral1behavioral2behavioral3