Extracted

• • Target

    6127daf756865ee089ba83efdadebda2c047026a698759de09127d0dfe630e8d.bin

  • Size

    760KB

  • MD5

    3734544ff6e3da8d41e19345384d010f

  • SHA1

    df19a5869fe0fa2a3567c1d96186de0ac83f10ad

  • SHA256

    6127daf756865ee089ba83efdadebda2c047026a698759de09127d0dfe630e8d

  • SHA512

    16814c94dfe32a50a3786431c9195db899f877e8cc3c9599d8fe3e6c92d9b59e30f4fe939d12961b947a158e877af926b034d0aed95829d8466f368dd9c254ba

  • SSDEEP

    12288:xO7GdIpJ6sgRwLzm5UOG4zT5WmpYshXZPbGwidNpg6:xwJ6sbLzmVG4zT5WmD9idNpZ

  Score

  8^/10

  bankerdiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  behavioral1behavioral2behavioral3