Extracted

• • Target
    TikTok18.apk
  • Size 17.0MB
  • SHA256 4284e6bbc2fc274d8b0a1f37f91408efc0404e4cae0ba28abc4d583bc59af6bd
  • MD5 e44f95c280846df11a96aeaddaf64cb5
  • SHA1 feff217787511a2d15f48aefaf1f43651fcef1a4
  • SHA512 7832f752e3d0538b4fee836175447966c0aaf2be178e491aaf65e1e0ed7acd19e7ee0df5d9e05eb28968f2fc9819f1773a0e09e8fbac2ba65c3e832d58284b21
  • SSDEEP 393216:hrzR6Q6v6Q6rQMt+QC1W39C54ZwzrdeuWtAEWS98yfLzasWnC:hrsQdQRMt+Qb9C/hEt99fLXyC
  • TLSH
    T11D07227BFB46B85EC5F3573785B19E32514B3D654B4386836808B228497BAEC0F19BC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  discoveryevasionpersistencecollectioncredential_accessimpact

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1behavioral2behavioral3
• • Target
    base.apk
  • Size 7.3MB
  • SHA256 85cf1361d652fb9f081bcbb2197f5855b53c70c815f72530b4a4cd6ce0876687
  • MD5 59f17a0aafb9ffcfaa8a5c1df802015f
  • SHA1 ef3aa3e2ce15e90dfd001cb3322b7e5cb5ee5854
  • SHA512 44e0183483ac59219084f6ecf1c65b88476b7f8ab5ad964ac226a8710ae45d5fd802c234018ee00f695634ca7d792b7c13aabdd85d5ac2bb0d773870c9e9eaaf
  • SSDEEP 196608:n3WeaiKf+OA6jN9AMOXJkB7VYl/i8S3lDOWFcv7u+:3We02O/AM8apS6d1DOm+n
  • TLSH
    T17F761203FF5AD49AC4F78B33D9B1513241866E558B83D2471858B3BD297BEF08A4ABC4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutiontrickmoimpactinfostealerpersistencetrojan

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo

  • Trickmo family

    trickmo

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral4behavioral5behavioral6