Extracted

• • Target
    d1b35a55b21449ebcb1c5e1ecb7e4bf753cc41130f5c5e30c70b12467f476f57
  • Size 13.0MB
  • SHA256 d1b35a55b21449ebcb1c5e1ecb7e4bf753cc41130f5c5e30c70b12467f476f57
  • MD5 abd7ae0a2c9f74785981e2f812422a89
  • SHA1 b7ef604da5e3ffa318923b682a1babf10a18a0af
  • SHA512 71a8f8ce16f6d2a0563b53d7934dac54ed35a29ad2559abc5ef44b0b6e65e126f696578fc61c833f0e2904f1b791a845cf943e276ab36f74996f1f08999e58a0
  • SSDEEP 196608:eJVuhAIlhBZG8Oe6h+XFNchgCIKYcXZ4fCDz9ByWfJ9TgTjjFO3Yiun38r7cYvYs:s2S5bhgalXOfCDz9jlsO3ru38r7VvYFu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  7^/10

  collectioncredential_accessevasionimpactdiscoverypersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2
• • Target
    base.apk
  • Size 7.0MB
  • SHA256 10c2cb7cea8f39b79f98116e632bc341b0dd9c719f93e73f3c1c1b1ac2cd9b4b
  • MD5 c5df3ef547d6c1cd3ba74d2e7231be3c
  • SHA1 64a2071c555f2d3527fe7e74a3f93b6243072f6b
  • SHA512 eda65711ebeba97605d1e02cb26387bd55f06b8e141aeaebfc9e17b78595f7a2672d0d9621dd14529ebb45e53fc58ebd68483f33521fa0f7a58b3cd155c9fd4b
  • SSDEEP 196608:IauO+GG1d4nSZBf9AWJ/9Zm7fjHOTISWnzwsYCVf:Ia4B1anSZBfLL8OTn8/1Vf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasionevasionexecutiontrickmoimpactinfostealerpersistencetrojandiscovery

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral3behavioral4