Extracted

• • Target

    87d971aebfa5bea28cf6c07d1f47eb5454bf504166cda22887a427d663e5ef09.bin

  • Size

    755KB

  • MD5

    d7e00058dd5a84bf7ba580112f145766

  • SHA1

    4c193b656321cd8cddb2114f21df7850b5bdef4a

  • SHA256

    87d971aebfa5bea28cf6c07d1f47eb5454bf504166cda22887a427d663e5ef09

  • SHA512

    31ec919fc7ae67da13dcac3cfb366835ea42d7f534075753f8bd1c0e19213851d5d483678107d805001e702d0c746f43cf56aa575801b3fe556e42e7f703c51f

  • SSDEEP

    12288:7Q6J6sgRALzACrT5mHt5WmpYshXZPbGwidNpgBc:06J6sjLzAUTcHt5WmD9idNph

  Score

  8^/10

  bankerdiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  behavioral1behavioral2behavioral3