Extracted

• • Target
    ready.apk
  • Size 8.5MB
  • SHA256 6c1aeaeb5786f3632f0a02356b26bdde2ccf77e1e8c6d3f8f6b88e9458f7839f
  • MD5 3ed5d51c0de69913571138b2b9617729
  • SHA1 64fb57126c243ef980a1254bf165585d3ed8f51a
  • SHA512 7db5e73d7ed04a7577e1a62550e771060ffab18fc41dae24d63c2a67d97b488f50649930e366396b01b5ae8457547d484c2f537392866384c736565ef39ac651
  • SSDEEP 98304:uioW49DJNHxL8e3IA5E0OqmzBzB8TN0tE1:uC41JZxxj5IFz0CQ
  • TLSH
    T1CB96F007BD42CAC7C56C92F5BA134FA82A371F49C5426EEB00253A6E3E361E64DD65CC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistenceprivilege_escalation

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Queries account information for other applications stored on the device

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection

  • Reads the content of the call log.

    collection

  • Acquires the wake lock

  • Launchs application uninstaller.

    defense_evasionimpact

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Requests allowing to install additional applications from unknown sources.

    defense_evasion

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion

  • Tries to add a device administrator.

    privilege_escalationimpact
  behavioral1behavioral2behavioral3behavioral4behavioral5behavioral6