Extracted

• • Target

    6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4.bin

  • Size

    3.9MB

  • MD5

    fb4c92934dbb3c8b06893a391cfcc593

  • SHA1

    ee4aef0276ca2060c316a51e284bccfdcd0236fa

  • SHA256

    6fccf43370d620708259e3dd5046bad4b40f0711a1709f37f01fac66338e03c4

  • SHA512

    8be46c9bb5787d068a653aaa901794a54e0b99a72dcd3153fc093475bde4f8e6b3b6acf91929af6265c8975c3f83d6509e4b6dc36490c2492b5c45e372c9d540

  • SSDEEP

    98304:b4rXoGtpHajJeWisENxYO00wZ/Z4lNWmu4n:a3yeWixxY/PZ424n

  Score

  8^/10

  evasionimpactpersistencecollectioncredential_access

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Prevents application removal

    Application may abuse the framework's APIs to prevent removal.

    evasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Acquires the wake lock

  behavioral1behavioral2behavioral3