Extracted

• • Target

    90f86de73782f957f80e6ec706508a9289f981c072b53fad245167e4ec165ce2.bin

  • Size

    760KB

  • MD5

    5c4508e4374199df7a045da068ec14ab

  • SHA1

    867901c31a678c6dcbb9ae04faea1bee5f089fed

  • SHA256

    90f86de73782f957f80e6ec706508a9289f981c072b53fad245167e4ec165ce2

  • SHA512

    9c6176d011999ec36a8636eefc323ad026f10dee6346b26124b38e0f3d098bf46077ece3b08176d5e7766db6881936a6e7165539cb7fe98a1d2f3288d8e17310

  • SSDEEP

    12288:yNItH55a1a8Lded9ZYTL4K5WmpYshXZPbGwidNpgPI:yNItja1a6edsTL4K5WmD9idNp3

  Score

  7^/10

  bankerdefense_evasiondiscoveryimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3