Extracted

• • Target

    cf35a80ba7862b730463fcc3f567355b42d44ed5ea3c1ba996209e34ae9876e8.bin

  • Size

    827KB

  • MD5

    2460affb0a69783b4d07b6e1d26a06ef

  • SHA1

    7fa09f7243007744e6bff925a8c590d57c8dd266

  • SHA256

    cf35a80ba7862b730463fcc3f567355b42d44ed5ea3c1ba996209e34ae9876e8

  • SHA512

    d48f54b040fe26ade85d9e4b1534c61fe5e8f39e2006b144134b797ea2587c51af013ba06a9166857eca6472d4733e5116cd778204dfab3d0b7aa997b5752a84

  • SSDEEP

    12288:fG8hEZja1a8LzewQvvGuGVa5C3/7z5WmpYshXZPbGwidNpgv:fUZa1amewWFGd7z5WmD9idNps

  Score

  8^/10

  bankerdiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  behavioral1behavioral2behavioral3