Extracted

• • Target

    c13785f4e2e6595da352af918252c5a71ae6e0750495877ed06a97a0fa1bc200.bin

  • Size

    760KB

  • MD5

    a6a6b856a34c21f6e031805c27cd98fc

  • SHA1

    2c1e2af3ad74c07532e9de9725625b65b7a806da

  • SHA256

    c13785f4e2e6595da352af918252c5a71ae6e0750495877ed06a97a0fa1bc200

  • SHA512

    d8cc1d139ae32c3de720fc41cad3c18e93b9cabfb23e5c43301f2699b45ff25a938e4807a2accac200350e9ec7579201efbc542617de980347a188f5e19a45ed

  • SSDEEP

    12288:YX1a1a8LzeaH4Fs3Vl5WmpYshXZPbGwidNpgW1:sa1ameaks3Vl5WmD9idNpZ

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3