Extracted

• • Target

    3e6517f2b8f9e030801267672026b5f110caa4572f6d69e25cef59b99ac6241f.bin

  • Size

    3.9MB

  • MD5

    6615419f50a50c83a7f016b8b69389d9

  • SHA1

    ee8419a83608a8575114e609248704080fc239f2

  • SHA256

    3e6517f2b8f9e030801267672026b5f110caa4572f6d69e25cef59b99ac6241f

  • SHA512

    bab86d3b241f817c53f9b60bcf58e3cf20b08ebd76d670210630c3039fe428acabac85ecb8483eabc3c59ac2d35575a5a5a098d3857501588d3b936c70828084

  • SSDEEP

    98304:4Ncd3tL02yAC0vR7rdJgJvQz6h80tWAdy7vG9woQN0BRp:4Ny3IAC0vRUJ4wrWCyrG9wYRp

  Score

  8^/10

  collectioncredential_accessevasionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Prevents application removal

    Application may abuse the framework's APIs to prevent removal.

    evasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Acquires the wake lock

  behavioral1behavioral2behavioral3