Extracted

• • Target

    d0e1adc13589d41996d75fe2c0d120d2dd1e05e8dbfd0300c6944a95eb7f9521.bin

  • Size

    814KB

  • MD5

    a3ddf48a8b1f3c05090f9b1369b0de05

  • SHA1

    32351e754ae17984cfef760aaba7a01e045fe6fa

  • SHA256

    d0e1adc13589d41996d75fe2c0d120d2dd1e05e8dbfd0300c6944a95eb7f9521

  • SHA512

    0886713a6cd55b58400d76bdebc6b45b9e39640e340c32f84f30e8e5e2f014c270d2367ce72ed3237b3f1b16dba7444c91e6a0b282a6dbd99bf999b992268f41

  • SSDEEP

    12288:KSVPU1a1a8Lze0oXTMi2d+/O9Kc5WmpYshXZPbGwidNpgOwH:NW1a1ame0ojMhKO9h5WmD9idNp0

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3