Extracted

• • Target

    3f2635a851613246c5b90723af0d83bf5760caf7ac1e6ea018eedde988f18b9f.bin

  • Size

    760KB

  • MD5

    9edb20af7fb729b049dfef31d7c86db0

  • SHA1

    1d1d28357ba95bb713191233f4681a875c37eb7f

  • SHA256

    3f2635a851613246c5b90723af0d83bf5760caf7ac1e6ea018eedde988f18b9f

  • SHA512

    a66db168d5dcc888ca335a8ee83c727731ed835b4c8fce67568ed1c937d10ffd01ca1f3565d28353b0216995ddfff701ca3b0b2378581f8f4c35e25dcb88809a

  • SSDEEP

    12288:i1/TP8a1a8LVeIjKZiTHb5WmpYshXZPbGwidNpgVB:i1/oa1aKeImiTHb5WmD9idNpUB

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3