Extracted

• • Target

    ready.apk

  • Size

    6.2MB

  • MD5

    0033771068ee4d623e59d5118a13ca6a

  • SHA1

    1627f51d7730a6743bd772a6e6cc017e98a909e0

  • SHA256

    54ab5879b262885c013643d8214d59b589faa416259271fe97fe55231e36bcc8

  • SHA512

    19b313afec70252c085c878d07c09aaa5a2bb8210c68a12814d86ad5832bb2b934d21ce61a7de567f292a847fd72b41b0fdce17bfdcdefe231922b620622f62b

  • SSDEEP

    12288:74a+AXd36mP0X7K23K/iI6+zE8Wsij3L6EkgYdTL7rDJvph22tiVPnToCDleWmKJ:L+Ad36m8e2wiAzJhT5jtsPnkCDYWmScY

  Score

  8^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3