Extracted

• • Target

    Viceversa.apk

  • Size

    3.6MB

  • MD5

    42cc3f3e6f92a049cb0d15e3bb20b2d9

  • SHA1

    e91e646ec9c2b7268fb2c4f8696009421503018b

  • SHA256

    71351a9013e7cfbe959d1ea78d1f7bf4bc2cb08a5716725c8434a911149099f3

  • SHA512

    d471ed7bffd97a61eafadcdf29b27d06f7bc65fcd63c7145e6b2f2e57f1bfc859c9c846c9ba1bfc25ad23f29b4d379ebf44fcac95430af1fc6aaeedf32add1ff

  • SSDEEP

    49152:EmXomFJBLNKNbJUnsd5XUqpvSTt4KNoWxLyz/tX9pBNuhmzjzdGGSQTORqUfYqAn:EcBMbJpjEKKnNoWxLtmzjzB9TD0t+jt

  Score

  8^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3