Extracted

• • Target
    5420523a07e24edd1f75170edd6ac7d9cd98fcf9e964d71a3c2bf4b8810e7e09
  • Size 12.4MB
  • SHA256 5420523a07e24edd1f75170edd6ac7d9cd98fcf9e964d71a3c2bf4b8810e7e09
  • MD5 632aa0f45fb88773feb73593262436a6
  • SHA1 70c3598d0dc0540ca56e5897d451efa82363cbb9
  • SHA512 2c6853a62bc72eb9baafd1a163bf6a712fa84bdfd286fa22ca49ec9cd1e3f83ed344ac70b6b197053f693c7724acde860234327a38b98c14b2c0de216c5f0545
  • SSDEEP 196608:q+UhqVMRpafNlLg+ZknptDUp5Rt45Q27MTAgwwidhAOUHM19U71larlYvWzdEXe:qyMb4lHZknrquQBAUMAOUkU7LgdV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  collectioncredential_accessevasionimpactdiscoverypersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2
• • Target
    base.apk
  • Size 6.6MB
  • SHA256 53fdb16ff3baf77b4a6a256c16c10edd90049da32b7ca0f7e6d1b85401c8378d
  • MD5 15c13609d07e0084fbc929338e9fddf6
  • SHA1 7f3a140daf3e4ae4e8695d11beb61fdb57762dce
  • SHA512 6812be10f72125442ac6a1503202f7ded7fcd6f81f0aa05e5ac3ccd2f1fa29fd3f6db87d6f3668eb9e7ae009266dd904b16326ff7fa3484515f856dcb85b5163
  • SSDEEP 98304:EgvHGNC64R0TFhF2l1bhu3LSvEUbjN9RDY0q7A8uk2fp38ni60L7bt4+qS6hXqiP:neUbNDLK5SsV0Lq+qS6hXqiUHQl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4