Extracted

• • Target
    c223f6af185906d50eef36ee91cfc879cb46bec2eeb83da6098157f890824aaa
  • Size 10.8MB
  • SHA256 c223f6af185906d50eef36ee91cfc879cb46bec2eeb83da6098157f890824aaa
  • MD5 c4c179752f64ddcdaa0a625f65a096cc
  • SHA1 f316c66dc79a3b71b290f23ad313803e7096f18b
  • SHA512 6689f9ad53ce3022a2c6254e818d9022cff2a60a343a4d5efbc87a8c451771fc5c98763abc80b4cb894e6b9a8de8190a2fd56713489221ac56f751709e746f0e
  • SSDEEP 196608:DzHZz/DJLqM4PLVMnbpbbJPYinWsmWrGwQLg4ebwqQalBlGOgVzBP7uBkmgXfGP:Dlz/DJeTVclX/mtghjd7ljgVtDuOzE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  collectioncredential_accessevasionimpactdiscoverypersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2
• • Target
    base.apk
  • Size 6.2MB
  • SHA256 eee91ce9571c9070d616e8b8f1cb6eaba630b4332b83fb188659691d32de9ef3
  • MD5 ee85726e77dc14cf4e92e3cbcb4248f5
  • SHA1 85ac8d021b5b89bcecbf992c39c048f7c2dd4731
  • SHA512 1c4181af58d3412bd3b81684c140c6f9c4948e5c8eaf49be5a284a751ac411938ae6d62d8006463e884ff3aca4c8b82804d5470f62146da8a35a07f142f7de66
  • SSDEEP 196608:Ty7ZBixb1bRJTukP4uiI3uCoHgQYdgC4wv57:+VBsJNdi5gb/PN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4