Extracted

• • Target

    8b8c9670671e0045bc181e931a3385d15d8ec514de7d2129e29fbc6a9e17f731.bin

  • Size

    760KB

  • MD5

    866b12c7ff897384cb5b44d7c175129e

  • SHA1

    ae6610cf8b6b10180bae51212157b13d157e6269

  • SHA256

    8b8c9670671e0045bc181e931a3385d15d8ec514de7d2129e29fbc6a9e17f731

  • SHA512

    c2ec57806babbb504d24f36abc875caf21945257dc7c206734a99eac1d2829bc9020434f2fbb927c57683e900eb14e8c483518db3750510b2e6bbbe5c061212c

  • SSDEEP

    12288:rKvEym5ajFjxfIN0uY5WmpYshXZPbGwidNpgrb:wEymkFjyN0uY5WmD9idNpc

  Score

  7^/10

  bankerdefense_evasiondiscoveryimpactpersistenceprivilege_escalation

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3