Extracted

• • Target
    9dbac60479e4242b8a5aea8c4b2719068451b091a6718bd01879ede09eda3ac2
  • Size 12.5MB
  • SHA256 9dbac60479e4242b8a5aea8c4b2719068451b091a6718bd01879ede09eda3ac2
  • MD5 88b44aaa477ce90af31bc6f9c92691d5
  • SHA1 8e7e320036f72ac5eaa9a413e97e6e7fc0c5de2a
  • SHA512 ffea0b83c85fd15d3dcf3930542f39ba9edfa9a0143ee35d13f3977ab1df19050f8a37e1e250afeef485afb2e18edaef6e2b2d37294c6ac72938c55b3b3ec6cf
  • SSDEEP 393216:8xWwGdGIVGjMuxUqe3FcvFaDPt0OSyyLG8F/:86t0jMu2VFcqtfCR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  collectioncredential_accessevasionimpactdiscoverypersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2
• • Target
    base.apk
  • Size 7.5MB
  • SHA256 74a7ef8243e6b7d248de31f56060d47c2e81dda20f24e566d6d8fb0b43594919
  • MD5 cb6e88044dede4d6e53cf6138457b0e6
  • SHA1 998f445a60404a047fec8ef36accff49bcb91fc6
  • SHA512 74a56790efe382aeca04f7b6bd7e6443198deaf8e7322e9e0abf9787f1b8b81009669982cc372c5622304ceb1021fe0f0122fdd67c8382b8806d167156921136
  • SSDEEP 196608:9T/cMeFzyuFAexqsGI07yM902slBbCV/djv5LHNIr0cuV5AyT:5/cVOQxqsGjXUlBenRLWWEyT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4