Extracted

• • Target

    Poisk-Phone.apk

  • Size

    3.7MB

  • MD5

    7e9837ebdbc8d7a06ae173464ef93c64

  • SHA1

    a8a2bfc9193160024f283b95933d969505223a15

  • SHA256

    c33deb1d25b66f2471ca0a9fcd534a7d0c5f87cc103b2f9793615176c69aa71e

  • SHA512

    4f1401d24fc89e989fb38f9e103b0501538451e6e084c0e7c045d77d740172ed9bbf4289a6f2cc327d70043bb142aa513214d48247e9d551449d181125416420

  • SSDEEP

    49152:6f89W2GOEzzrqIU543qhOEEIGDnbig+mzHzdGGEQTOTuU+Yq00cgwtx1dbik1MCt:73czXqIUuE8jGg+mzHzBTTY0twtrj

  Score

  7^/10

  bankercollectioncredential_accessdiscoveryevasionexecutionpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1