Extracted

• • Target

    c295b195bfdb2d65872004f62bb855f943189e7e673005a49db0ec29d6df0f88.bin

  • Size

    1.3MB

  • MD5

    93595ca25989932d9539d23a7b450240

  • SHA1

    575669a43d480a1f809f86a79f0d1262cbfb00d5

  • SHA256

    c295b195bfdb2d65872004f62bb855f943189e7e673005a49db0ec29d6df0f88

  • SHA512

    9608f0c4febd01488b7e4a503e91ebc974d3d6f8e29b81707a485e41ec40bfe0fefac2e9fe862cfa1470898501df74c768639e78ba584973764bb6dc3bb6c0a6

  • SSDEEP

    24576:wQrpa1a2ey3vQayDu2jfLBIcFjUIJLILheiI7p4TU9jN0oW18uB9dIpYEBDi5Wmk:Rpa1aqvQayDu2jfLBIcFjUIJLILheiIR

  Score

  7^/10

  bankerdiscoveryevasionpersistenceimpactprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3