Extracted

• • Target
    016d56f634a89cc798959276e5e8e5fa0529601b250b484d944c3a33cb94080c.bin
  • Size 760KB
  • SHA256 016d56f634a89cc798959276e5e8e5fa0529601b250b484d944c3a33cb94080c
  • MD5 93bdb750f0eccca14def69bed41437a9
  • SHA1 7f36f1ca5b4a0bc25ccdbf4c1ff151f17ad94108
  • SHA512 a31efe804eb930f72280878d963d9cf3cdf48bc534a34dda019d4d7c79d8a245f39c9c32b06d7b925f0005c9441af3f7bfe18ca11cbd4d3f262bd334c1087231
  • SSDEEP 12288:+rILst3+a1a8LVeBVFs3PM+5WmpYshXZPbGwidNpgP:+rbOa1aKeBU3PM+5WmD9idNpY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  8^/10

  bankerdiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  behavioral1behavioral2behavioral3