Extracted

• • Target
    b2588855f70109be50619d708d259a3b401e6ac5f17a30dfe72f442e25084e8b
  • Size 12.4MB
  • SHA256 b2588855f70109be50619d708d259a3b401e6ac5f17a30dfe72f442e25084e8b
  • MD5 799dd08344bccf359d26fc30c56f85b4
  • SHA1 6673c29e03893213a5ff5d9c745210a11f76c7a7
  • SHA512 3b238d9879aed42f59971ffb3006869b422e3f811534632cc1e6c949704081d52ca563776d6cc7861cd40817918dcb26b890137ee7c76671ebcefd3122567d3d
  • SSDEEP 393216:/XegalXOfCDz9jlsO3ru38r7VvkSO0pD3HE:/OgalXOfCDzvsObusr7Vv50
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral1behavioral2
• • Target
    base.apk
  • Size 7.0MB
  • SHA256 10c2cb7cea8f39b79f98116e632bc341b0dd9c719f93e73f3c1c1b1ac2cd9b4b
  • MD5 c5df3ef547d6c1cd3ba74d2e7231be3c
  • SHA1 64a2071c555f2d3527fe7e74a3f93b6243072f6b
  • SHA512 eda65711ebeba97605d1e02cb26387bd55f06b8e141aeaebfc9e17b78595f7a2672d0d9621dd14529ebb45e53fc58ebd68483f33521fa0f7a58b3cd155c9fd4b
  • SSDEEP 196608:IauO+GG1d4nSZBf9AWJ/9Zm7fjHOTISWnzwsYCVf:Ia4B1anSZBfLL8OTn8/1Vf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4