Extracted

• • Target

    bd067e8c808eca1a97bf7fbccc95b9d36fa99d60f199dcc15d125a945cdb1c88.bin

  • Size

    760KB

  • MD5

    ed6342cd75ec86898952f1be5e51ab78

  • SHA1

    d840ba865a4df66bb9efe2ba44b4a2c470f76dd5

  • SHA256

    bd067e8c808eca1a97bf7fbccc95b9d36fa99d60f199dcc15d125a945cdb1c88

  • SHA512

    5347233a9ad7e6b3b1d3b1faf015a04c8fd686eba44058c87ba6b56a4654599e691743926114e453cefd094e7dac135cc3d9557f842a4e098accf9e91c070b6c

  • SSDEEP

    12288:ctsZ8Da1a8LVe8ffHf67KIL5WmpYshXZPbGwidNpgHH:cIYa1aKe8nfAKIL5WmD9idNpE

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3