Extracted

• • Target
    ready.apk
  • Size 4.7MB
  • SHA256 f9e228585690428dab8202a2fa52403fa036bdebf87127402832f3e5ad02cb6c
  • MD5 3ce1061faf70bede29b0d4165bc57e47
  • SHA1 2764d443e13ee48175e930ec4b1f6e412d8a0d3b
  • SHA512 27ffa2863426d8e78d59556c25d8a5047b210019b70704d878681f0a9977c83827f03300a13ae5123778c67f54278426c1cf5e6eb9a0476c0b39f49415b47450
  • SSDEEP 98304:HGsnKhoeURf2543/h3WGmzezBdT50tgKuAA:ms+Ptwh3WxzsWY
  • TLSH
    T1B036E003FB84CAAAD4BAC7F52B330FA91A175F18C642A6D70415762E2D775C10ED9ACC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistenceprivilege_escalation

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion

  • Requests enabling of the accessibility settings.

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3