Extracted

• • Target

    33ef707477b069d00bdc4ab03b55086a4a9f4d8ab5ff939fc90b63572245d85a.bin

  • Size

    760KB

  • MD5

    06dbcc17d6113c692af5d72581c3b8c3

  • SHA1

    68cda5706c8a684dcec8ca004dbd6f476c2fc26f

  • SHA256

    33ef707477b069d00bdc4ab03b55086a4a9f4d8ab5ff939fc90b63572245d85a

  • SHA512

    8b021863a0d5ec0590dd03ae1ff2c9283dc62294895bd09b90f8f5a1f212892f119fc05b178e21740ae270369bebdaa858ea24b89f9ad1d636f58b29fa23770f

  • SSDEEP

    12288:lXIA/AGha1a8LzeKXcHYLxt5WmpYshXZPbGwidNpglS:lXIEha1ameKCYLxt5WmD9idNpD

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3