Extracted

• • Target

    c0950c697eb7ec84d1406e258a137924b24ef22be460eaee9e4cc88b6a43cd3b.bin

  • Size

    4.2MB

  • MD5

    c60df2dcc8e5c990bcac34123e232f45

  • SHA1

    53b688467668bb5ea3a0c97a0bec12edf82f3769

  • SHA256

    c0950c697eb7ec84d1406e258a137924b24ef22be460eaee9e4cc88b6a43cd3b

  • SHA512

    7a9b88ee04d3b885879aa17bf5709ccc2f7524b8cce2612103200126b1e37dcd6fcf8b52cde579dc79ed3fcd3d7a90f5da611dab4ba916755ba23222d2637405

  • SSDEEP

    98304:lDxwlp3SgS0Dk8JaF/6SudPIqfSD0eXD0fD0pD0nA5D0lD0Dv8:lVup31DBJaF/TYPI2SDFDGDoDCMDEDKk

  Score

  7^/10

  collectioncredential_accessdiscoveryevasionpersistenceimpact

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectionevasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Acquires the wake lock

  • Checks the application is allowed to request package installs through the package installer

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    evasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries the mobile country code (MCC)

    discovery

  • Requests accessing notifications (often used to intercept notifications before users become aware).

    collectioncredential_access

  • Requests allowing to install additional applications from unknown sources.

    evasion

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    evasion

  • Requests modifying system settings.

    evasion

  • Requests overlaying windows on top of other apps.

    collectioncredential_access
  behavioral1behavioral2behavioral3