Extracted

• • Target

    bef423d295134df14517f742c30353a91686fd9438b9bcc568d77e99f9ee0fd4.bin

  • Size

    4.4MB

  • MD5

    fac23139d0727cf2654ec6bc0b20e1a0

  • SHA1

    a8210050a7eca1486e188a6e4222b5083ba59001

  • SHA256

    bef423d295134df14517f742c30353a91686fd9438b9bcc568d77e99f9ee0fd4

  • SHA512

    beae6a5abca47643a87621c6322c8a73657d19ef2a1171aef1d0e28a4ff9f55157f65420bc3c33ffeac231412bdf267e9193c39d0f1a5aedc841332416363492

  • SSDEEP

    98304:WyFxt0fsIaTfhwmGKfrr8WnzCjuY3gSbF8R1VlfKhJveJzwwP:WoHJfFLz4ZHbFe1Vlf4eJkwP

  Score

  4^/10

  impact
  behavioral1behavioral2behavioral3

• • Target

    up.apk

  • Size

    3.7MB

  • MD5

    eb4b2f66ff6b63730718457098e28553

  • SHA1

    db2d76eff8ac87e84b5c9550e7feaa45b084bd2d

  • SHA256

    5705b434e15ff8062762ac9d692b708d1284f8fe7c792a7375f092747d42c1c6

  • SHA512

    1f1ac3269898a27e0ad0e83964c982774dc7d75998b6d3cc494d3e150ea651827882b72ecdc07b3cb07d4c396cba6538ff597517b6b247fa405f0c65abade498

  • SSDEEP

    98304:xEJERzdoJhv8xT3haCi3yQ1LRShhEEgIk:xKEtyyh4DTSnPpk

  Score

  7^/10

  collectioncredential_accessevasionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion
  behavioral4behavioral5behavioral6