Extracted

• • Target

    da7e6252bfceaa7ff96567bb8683d85a3d8cc49ef8e787182abd998d79104735.bin

  • Size

    760KB

  • MD5

    c14e7d047b0a399ef1939dc3e7f39184

  • SHA1

    c3286281b1b26bb38f7ba540d4a0ec1b8b32fb9b

  • SHA256

    da7e6252bfceaa7ff96567bb8683d85a3d8cc49ef8e787182abd998d79104735

  • SHA512

    f9d60dc2d3d651c941ba53bf5f9d0497998619734ac94c0f91bd78d7788b6f734daf41949fb2838ccefba907fb1df5c02b3326a2eeff187bfb2e2fdf6b32d35d

  • SSDEEP

    12288:C/Qemipa1a8LzemZOcP8tx5WmpYshXZPbGwidNpgm8:Coeza1amemEcktx5WmD9idNp0

  Score

  7^/10

  bankerdiscoveryevasionimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3