Extracted

• • Target

    Linken Sphere.apk

  • Size

    3.8MB

  • MD5

    8169d13048beb90590fa5a9dcb3c40b6

  • SHA1

    94be8da1f709560dfaae4ea4c557ac7128f087fc

  • SHA256

    77277306eee10a779f8e9747e036fbc37cf4ab04dccb605e5a5f07291f102199

  • SHA512

    d9d89fd911e95316a84ae8258e1096897aee5f26f0f8b37f7bed26f3a7363437fd403e08b61a5a504dc7d719f4c76ced2a5a99c7e3b3fb414def9229520f8995

  • SSDEEP

    49152:gpvwLtu3iuk4nFnQwVjaO6jyLzqqWXhmzJzdGGeQTOPpUWYq90cg67Uoik5jW:gBYtuSu5PwjezFWXhmzJzBxT60t67zC

  Score

  7^/10

  bankercollectioncredential_accessdiscoveryevasionexecutionpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3