Extracted

• • Target

    97cf6752734816208ff03eea523825bcfc7270d52d8c5f0f02951236885e0403

  • Size

    12.5MB

  • MD5

    42ad0ff73e0b4295a4ae2ca600b9e5fa

  • SHA1

    7dd9260843bb1ee8613fc2eb913e776b4c0fcbb4

  • SHA256

    97cf6752734816208ff03eea523825bcfc7270d52d8c5f0f02951236885e0403

  • SHA512

    59efd73b3eb3ff2a17bf88b42575d142fd54c9eda6eb5316444efa14c1980991e11e1780ea3f71d082d5bef7ec74fe023d221ed962b083650ed9f4c6ffc766ee

  • SSDEEP

    196608:mAgbdVg7aNmVAcIro36mugUFcs1Pohd2r7+2Lejjd/1dTWr2pRCYgY8:mAg5N8Atro78cskT2LijZHWipRFP8

  Score

  7^/10

  collectioncredential_accessevasionexecutionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests changing the default SMS application.

    collectionimpact

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3