Extracted

• • Target
    fe4860981aaa52470e6ec99ebcd307567b1ee66b1f577f19c3cb512b0f2b43e9
  • Size 13.1MB
  • SHA256 fe4860981aaa52470e6ec99ebcd307567b1ee66b1f577f19c3cb512b0f2b43e9
  • MD5 8f39979bd9f9620c69b705bba6f0ca7c
  • SHA1 4b5fd034632c24b2ab87a1ba9e9286751ba81d41
  • SHA512 c7c7d46b2d08acfa81bddfef2ffdf4fb427eec4a3f6998b32929938666d8cf54f342721e5ef386bc8e07b11a49a46b462994524521d6017c4c84a850fe384dbe
  • SSDEEP 393216:rClQrXnS+UHR7CO/V/HGgwF7A1qM+5ZRwodETz:rCcS+UHmbA/+5ZFqTz
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  collectioncredential_accessevasionimpactdiscoverypersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2
• • Target
    base.apk
  • Size 7.7MB
  • SHA256 ce815833ec2731cca3c354b071f21ad11a9a7a399eccf321e40598a0aede0712
  • MD5 e6c3dac2f12cdbb0e663282248f128d4
  • SHA1 2111bcb644839a92a1710033b1bc81e9bfdf71a3
  • SHA512 577b1d85512698813b9469d04c3f79820c181cc376282eabb68d126bbc20755b458c080cc2266ed576e636185a6797a22ca8cbb4245104e6fcaa089d5a48b825
  • SSDEEP 196608:xGNFYrL7KlK7r21nsywshDvb/Z+ynjbcfKaesAIRe:OOrL7KWa1ntwAbb/Z+gbPPf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4