Extracted

• • Target

    852cea014fdae474d9cd76cada3b0debb9340698bfff9f23a912109f5249bca9

  • Size

    18.7MB

  • MD5

    c1bd7281d679534ecd67d493177387fd

  • SHA1

    7a6811fc5c0599d86b6b10ad6713175899d3eafb

  • SHA256

    852cea014fdae474d9cd76cada3b0debb9340698bfff9f23a912109f5249bca9

  • SHA512

    221b89a1be21e6d7f6de3eaecd18d094926852a1501d836a815b6b58583b579b69f285394b68103533ebabf93535ed47aa912ddcc75d4b7c4c134771ffc4dbaf

  • SSDEEP

    12288:EHy4hnuZ9LFAyhT6mJLeWb3rjjoCkF3izP1rgU3QiUua4RqjA+dA2kpMUkAhuzYx:4y4wB0KbbjjoR3+d0U6uaolWcqW

  Score

  8^/10

  collectioncredential_accessevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion
  behavioral1behavioral2behavioral3