Extracted

• • Target

    16ac3c90d55ff31c33b23bf3af8eb4fc51c9aae94bfce277b8ca727f33fd8f70.bin

  • Size

    816KB

  • MD5

    33c0432a5ab45917496e92808936e943

  • SHA1

    7e4933f137e7f3d328c71c9a72022cf6963e0692

  • SHA256

    16ac3c90d55ff31c33b23bf3af8eb4fc51c9aae94bfce277b8ca727f33fd8f70

  • SHA512

    2a34fe0c636e323cca77d41c5b19ba5b8e3fac976a11809cb7e5ea558197d65f650ce2207d6ff2c618eff56caf5cb16cdfed699c27cfcc6389725ec5a2900a60

  • SSDEEP

    12288:4ff2/9mziH2PIwT/2FsCmfNIzXRFZHv62pC7pLRYLLLLJi+JvEchgsRVkDhy:qf2/9mz/wwTHCINIzXtHaV8vEchfVz

  Score

  8^/10

  bankerdefense_evasiondiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  behavioral1behavioral2behavioral3