Extracted

• • Target

    c49c238735d7ac11e95449ebabffec7581cc74dba8090790d53f1fe4c574d434.bin

  • Size

    4.6MB

  • MD5

    5c9a6a905a6a8999610ab53d48a60764

  • SHA1

    c84c1c32fbc68399d215ef32b8109dbb9654aa91

  • SHA256

    c49c238735d7ac11e95449ebabffec7581cc74dba8090790d53f1fe4c574d434

  • SHA512

    ed8ddfbf6a6b6ea180b56a82b35dbc20d9242b96062704780b9312923ac33b2f6d6fad0dc208842a3990a8220e5822d7ea72c5064e0ae105cfa6248431f574d4

  • SSDEEP

    98304:j37e8iLYjq9z2LVdx9U/CkeVEz9nA5cX9yt0y4MYb4mU6:j31iAqyVdxm/CkeVEz2cWYb/r

  Score

  4^/10

  impact
  behavioral1behavioral2behavioral3

• • Target

    up.apk

  • Size

    3.9MB

  • MD5

    c5fe2c9a190f00a492120278104f011a

  • SHA1

    b9dce8c9c890746ffdd63a2760d087327ca074fd

  • SHA256

    18f5f817288f48fa4285e916a2ee3ecf78591b46eb341f5ab6ca8805bfcd502c

  • SHA512

    b0f5114cf1272d3093532f9e91425156320240561c87668dc1e29b90097d956666a10d08b6c8c50196721b947e274f0095982d8ffe389b6b2aab015631ffe590

  • SSDEEP

    98304:/v6ufpJO5RdxBmOtOAenID1PQl83kgPRM+jLVv:/vBmRdxUOtOAenIDuBQMgVv

  Score

  7^/10

  defense_evasionevasionimpactpersistencecollectioncredential_access

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion
  behavioral4behavioral5behavioral6