Extracted

• • Target

    4b6df0764b5f2fd79c6fd0a342be0ee77d4f4e50759c8dbae3d8816bbbc3141b.bin

  • Size

    742KB

  • MD5

    577a304008de7499608cfa1c734adf30

  • SHA1

    af66ec843202ece2439a137e39d1e6cc6fbe452e

  • SHA256

    4b6df0764b5f2fd79c6fd0a342be0ee77d4f4e50759c8dbae3d8816bbbc3141b

  • SHA512

    1fd634cdbd6e000f4ec08d05dde898abe665139edc2823d073bf9122e721ee0df24f53f97dba671adcadf7ede6346c25084095900e78bc7433cf54559eb5dabf

  • SSDEEP

    12288:fYoH6a1a8LVeyOrMSQ+LB5WmpYshXZPbGwidNpgTO5:fY7a1aKey9SQ+LB5WmD9idNpU2

  Score

  7^/10

  bankerdefense_evasiondiscoverypersistence

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests enabling of the accessibility settings.

  behavioral1behavioral2behavioral3