Extracted

• • Target
    ready.apk
  • Size 29KB
  • SHA256 4846b14377a2f6f182288b8c1b61169af990b32d37c668700657d6cfd0c91a03
  • MD5 eb470f9dfe4e7134544e47cc8df3b58d
  • SHA1 a6c81197152b1f0e3d9cc47c6221094ea8c12ca3
  • SHA512 0e57fd61ab0895282cd9d5a034ef0e2ac04362d2aefc2128869c674b21125e52072f05bd8ab9fb8f486424080dda35ab5f6b5e2e5da20588f12c248e5dc2a73f
  • SSDEEP 384:gKkIwSBJ8jJeCgxILlHjpbqn3Ka3HYW4mUPmYajgzrHvY81Tb4rswSXbHX54uKsF:Tk1SL2kJqRDqoWL2mTgzrHv11TQhY35F
  • MD5 SHA1 SHA512 SSDEEP

  Score

  8^/10

  bankerdefense_evasiondiscoveryevasionpersistencestealthtrojancollection

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Queries account information for other applications stored on the device

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection

  • Reads the content of the SMS messages.

    collection

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Queries information about active data network

    discovery

  • Queries the unique device ID (IMEI, MEID, IMSI)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3