Extracted

• • Target

    4305036bbd99856d6ee8f26f1c8b16db1f513bb80bc4d0dd1e00c82c9ae732ff.bin

  • Size

    762KB

  • MD5

    4be4c00911e7787530b47ac09b99d9db

  • SHA1

    d045e2374640738b3eea75f02897f744a42a50b0

  • SHA256

    4305036bbd99856d6ee8f26f1c8b16db1f513bb80bc4d0dd1e00c82c9ae732ff

  • SHA512

    a682756e197e6fb8d49a78987dceebfabf8b64833a1b1d15245d21cb370326b4b9a5e8f7238c64fd098c23ea10484fdc3a2e635c13f2c76ac233f9851cf5f131

  • SSDEEP

    12288:1DnRJ6sgRALzr520zdrfbwGS+ZE58tRrf736a:1NJ6s7Lzr00zdrfbw9Oi8tJD

  Score

  7^/10

  bankerdiscoveryevasionpersistence

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  behavioral1behavioral2behavioral3