Extracted

• • Target

    289dffc1e9e8a23c41eca28ee87350464eeea076c653d709cab8a8cd0c980c58.bin

  • Size

    3.6MB

  • MD5

    bf715cdab30fca7c2d551a07219c54ba

  • SHA1

    969cee8e3cb30c083243edf7606f415dd675e861

  • SHA256

    289dffc1e9e8a23c41eca28ee87350464eeea076c653d709cab8a8cd0c980c58

  • SHA512

    8e84effe8947311aa1dc47ea8f0371b6a7fa32bc9548035527e8b1328746ec8554af48309bdaeaa74d9b95a7766e52bc08ccad489062c49eeb85625835f10cad

  • SSDEEP

    98304:vYJ3war8cXRHrCOvT/2iehAL0WHlRQjppymSNyk87lWI6:wOSRLCAT+JA4WHQOFQXxN6

  Score

  7^/10

  collectioncredential_accessevasionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion
  behavioral1behavioral2behavioral3