Extracted

• • Target

    9bab0bbe0e0fc1b5fda8e64bd8ed7aa63be5dc1a689a35524b563d3b6551e95a.bin

  • Size

    745KB

  • MD5

    df9867e610fd9ab0d250296b8a2afc7e

  • SHA1

    b3bf47a71eda0c61cd8d2a46b15d9439d46ba960

  • SHA256

    9bab0bbe0e0fc1b5fda8e64bd8ed7aa63be5dc1a689a35524b563d3b6551e95a

  • SHA512

    363d6dc49ccfe115910cd427bfa7c19c2c379ac2f39771a9a9d345b4fc984a743d5d6f9b004d234f5fc3d7302e6fab0bf3a9289c3a7198a1fd88589e0828923a

  • SSDEEP

    12288:nkqiJ6sgRwLzvgo6JoZ5WmpYshXZPbGwidNpg1:kxJ6sbLzvF6JoZ5WmD9idNpG

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3