Extracted

• • Target

    7f48be28901f7489316b9fb80ba69c2f02448b54417a56ebc8e89b4b66bce7fd.bin

  • Size

    777KB

  • MD5

    b2ccbc94188fd78793a43bb6800f8ef4

  • SHA1

    22f58641c6b26a36d715535a396ba737af030113

  • SHA256

    7f48be28901f7489316b9fb80ba69c2f02448b54417a56ebc8e89b4b66bce7fd

  • SHA512

    3d525dfd8c8dd5070348bbca48d4899a6cf9da7e5074625e73b9975c91039787592898d43a65bfbecd053051d71572abb9ba532ef646ae467b21620510bc238a

  • SSDEEP

    12288:GDyu2TV1a1a8LzeJYU8AgVpsC5WmpYshXZPbGwidNpg33:Geuw1a1ameJYBASpF5WmD9idNpI

  Score

  7^/10

  bankerdefense_evasiondiscoverypersistence

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  behavioral1behavioral2behavioral3