Extracted

• • Target

    7fa3d58a0056e8492a84894a6fd3b3d0d87ff1f9656f5e54b10580b9a4a4fd6a

  • Size

    4.5MB

  • MD5

    4f007c674721466ff8af2d6b8b0e6040

  • SHA1

    0694c99741258c9609771c544a647f6641caa138

  • SHA256

    7fa3d58a0056e8492a84894a6fd3b3d0d87ff1f9656f5e54b10580b9a4a4fd6a

  • SHA512

    3372612e6ad916538bb4c41914f30be9e910370e66d91ccacbc3968ae433b83f2e9140c0d3c0d978787b726197057d1ddf74caffc68bca55527b3d44fa46658f

  • SSDEEP

    98304:L9hinlhin6Vhinahinx1hin6hinshinUhinWUlbqT0+L1ePKRMpxYw7:LbCzC6DC8CxjCcCyCKCWhwA1wKRa2k

  Score

  7^/10

  collectioncredential_accessdiscoveryevasionpersistenceimpact

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries the mobile country code (MCC)

    discovery

  • Requests accessing notifications (often used to intercept notifications before users become aware).

    collectioncredential_access
  behavioral1behavioral2behavioral3