Extracted

• • Target

    b7f4072a869462c0b47edf9a196959ae60de668702ffe107c46d6a1bad7c95f3.bin

  • Size

    773KB

  • MD5

    af20ca49eb10288dd9e5711d66d4037e

  • SHA1

    123749d70d5d90f711501136accecdd52c99a44e

  • SHA256

    b7f4072a869462c0b47edf9a196959ae60de668702ffe107c46d6a1bad7c95f3

  • SHA512

    d5414900a1cabf3da4a64112e0366caec0ac903e7042882e4ef0bcc0bb2af5e00b0e40424322076fdfa481a057c24fc9e63ce4afd1898ac9a982fb52963a38e8

  • SSDEEP

    12288:QOp4a1a8Lze1Lw2Mi0hZG5WmpYshXZPbGwidNpgBw:tp4a1ameBTMi2ZG5WmD9idNpaw

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3