Extracted

• • Target
    inattv.apk
  • Size 4.8MB
  • SHA256 1caac2bc570a6bfe4c0adea6f5007dfb512358bebfbd522f0f5f4b69d4a0cadf
  • MD5 f25722b91c4d2423bd635c918187680e
  • SHA1 80258c0c33c7aab28d5aa688d84c33b0c9c6a249
  • SHA512 76d7e218add7c5eff6e41e2de6349e9b959e2ddb59dcd1562c2968bcee0dbc1bf6bcc451e407e306268310463c155e4798bd26c5665107ec0f3c9b8dd070c0e2
  • SSDEEP 98304:BlzBETLmzWkQEKaNZBZZyH7E0tFEWlpdv:GazWkyaNg3FTv
  • TLSH
    T11F36CF07FB45C797E4B9C3F86A332FA91A171F04CA9296DB8429366E2E731D14DC49C8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3