Extracted

• • Target
    2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
  • Size 12.3MB
  • SHA256 2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
  • MD5 2f3007ee33b231c1c678516e5e8e7348
  • SHA1 c770ed5d3d5241e84b90c706228e4f00859e11a3
  • SHA512 1183ff1f80e5463ba74f06c666634f7e4011fe332151d1ac763b064b7dcc5cc87cfaebcd133110fbb7d45db62295f5cd8ee6e880b2b3beab007f1293f57e1102
  • SSDEEP 196608:DcKGW4JuV/ua0jZuvbG7kJ4bgyu5yEyU5huUonYaTnic46zQJqCUeFIIupnbhTgZ:DMv6/uaRJJ4bStri3nYam0ubIISmR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  collectioncredential_accessevasionimpactdiscoverypersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2
• • Target
    base.apk
  • Size 6.9MB
  • SHA256 e405451fb3eb9dd76bce40a0d575d97bfd9bb545309ff634156e4fca78335105
  • MD5 8af4db27e67bd35d2c70b2a9f6d71b86
  • SHA1 d154dbd7db47cb88893f2ced5dd98d4f37d8d4be
  • SHA512 e1ba9f6ed8bc03178f4a44939084d3b6db010c5af52a44397e0deaef4325666dd54e72c7c6da55ed8172ce7e245f70a14e2052c2c43eaa66c5d8eb4a41e56f52
  • SSDEEP 196608:jXhnSTpwK25+wrP2euK1i/2CoqxIy2Jdrlpq/9ccfKaR:ThSeV5+wy8+jIykfg
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4