Extracted

• • Target

    6d991fa4408887b4271b0cbed18b99c9a23788d6a2a4bf22ef4079cce0439f29.bin

  • Size

    760KB

  • MD5

    b4190d34f6a4b321a012d47dea6f3e21

  • SHA1

    ab8814ba18f4593860b161772f05d47573c817cf

  • SHA256

    6d991fa4408887b4271b0cbed18b99c9a23788d6a2a4bf22ef4079cce0439f29

  • SHA512

    76fcc504ce86c9e664ad0f9c3266725e1e48c20949d96159113fb4cde23968c6fd19621e21ab5468d4374b39b4f373aa3b8e85d275ec0426af80b71314642c57

  • SSDEEP

    12288:qglh0a1a8LzegzCh6zPz5WmpYshXZPbGwidNpgh:q7a1ameg26zPz5WmD9idNpe

  Score

  7^/10

  bankerdiscoveryevasionpersistenceimpactprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3