Extracted

• • Target

    b40118f9285dc68c87f185866f771f07ff443e58663a946cd35e78be77095fcd.bin

  • Size

    760KB

  • MD5

    48b7297731918dd783f37ff49ba8d35b

  • SHA1

    1a6219565af1c72b546f25b3690e0e3e07facdaa

  • SHA256

    b40118f9285dc68c87f185866f771f07ff443e58663a946cd35e78be77095fcd

  • SHA512

    bd46cd27b9cae2df1ae2c7092a08be03496b62db2b488a10f5eb5ac386e69652b4e176105ed6a1cedb88f02f6e8d438157ec1fa19a36ce8b32ff3966331d4432

  • SSDEEP

    12288:JbOUBZRvSMq6nE3stZF5WmpYshXZPbGwidNpgXt:JBBZRrq6GstZF5WmD9idNp8t

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3