Extracted

• • Target

    d98ca95aa3d9fa64abbf271087db89145d2fc24010000c8e48374bfd04942b8c.bin

  • Size

    4.5MB

  • MD5

    1ffaad683dfb2827e47f00a5d4bf3091

  • SHA1

    529f917e524040cf2addc9cb5c45694d0c3296ba

  • SHA256

    d98ca95aa3d9fa64abbf271087db89145d2fc24010000c8e48374bfd04942b8c

  • SHA512

    c061e976560fab9071cc2e255d8d3724c4700dd13860249f07f5808974d1f3a1fb421f2cbe46c419dc4d90b04bd6de1304faa5afbad3f2b10762ad66df0dfa56

  • SSDEEP

    98304:T05cTW9eh3x4s/M5MCIqNV10+ug5P8oibdriaaOqgOLbXJ/pTiZFga:ccTW9ehuIIHIcC+p1ibYLaA/Ji7ga

  Score

  4^/10

  impact
  behavioral1behavioral2behavioral3

• • Target

    up.apk

  • Size

    3.7MB

  • MD5

    c72963285bbfc241f6f7cbac4c29ca51

  • SHA1

    7f614d37327affb9201c28fa680c7874efc005be

  • SHA256

    fefb6212e55b5b9569d8763ff469b32afb08ee88fa96fdfe1152c1d247309077

  • SHA512

    e5a97da92c99e3e832c037b900d726b53b63830fc2908612d266c2549d6cbf7fd5279fc393cd597ad7570d7ab504c05aaf633e63dbd46265e82717f592836562

  • SSDEEP

    98304:9P1DDmLU1I3+CfKTAYIU0WbN6og3N6iPu0s+AiHZgUU0I:fD3215tUJ/g3fPWBitU0I

  Score

  7^/10

  evasionimpactpersistencecollectioncredential_access

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion
  behavioral4behavioral5behavioral6