Extracted

• • Target
    inattv.apk
  • Size 3.8MB
  • SHA256 d19edfbc70474a76b2dd6d8d0e844404f7b4c364c2278a6a668159e83310598a
  • MD5 05aec94cc640a223d96780665467cec9
  • SHA1 3932c1023db81b79b3d829ef19af9ac9ac0b709e
  • SHA512 172bee816dd35d52024fcfe76df8be4ad0e264f3a424152e8b058310d6f493d80c7f1bd12abe54453bcb4e3eada1d56e901a0d3658ce1fb3e298c46bdb85bc92
  • SSDEEP 98304:iZzBDT+mzeMvx2YqLYROcRXkaIC0t0TvhCKjJa:2ZzeMvYYhOJ00Yg
  • MD5 SHA1 SHA512 SSDEEP

  Score

  8^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3