Extracted

• • Target

    e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb.bin

  • Size

    3.9MB

  • MD5

    8b83ff50b4b15eefe846ec24e750091c

  • SHA1

    fe59eb92b1a27f7a7a64f6d319e38e5ef8b596d5

  • SHA256

    e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb

  • SHA512

    d1fa9aa27d2209bc42967c0dd669d8f651bc8d7ba5285bd090536f7da9e320d73297a36ba2acf4e8da227f09e226c07348d9337357d0d2accedafa3fb3b179e2

  • SSDEEP

    49152:Y3gHkefQN3R/bq6ZqOO2zuH7k4gX1qw/B4qNby02RxFgBML+t9g1/ynPDWFQi9kb:sgHfINBlZqGzw7kFFKJgiLG98yPDG0

  Score

  7^/10

  collectioncredential_accessevasionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion
  behavioral1behavioral2behavioral3