Extracted

• • Target
    %D0%92%D0%B8%D0%B4%D0%B5%D0%BE_%D1%81_%D0%94%D0%A2%D0%9F.apk
  • Size 2.0MB
  • SHA256 da516184f79e8ab9750482747a186bb485f4cd945c3f0e4deb37109f448e7f81
  • MD5 f12b4b2ddd827429c69584836907d543
  • SHA1 57049ef091ff57a16321444ba3d88ec25a5edfcb
  • SHA512 d510b3724756169be3639387548854ecb7c09aa94bebf02e960850a5e31e0b0e1492e5655ef08e306b5cf85ea8ddd2041b7e261b1f5d9f8d25e9f07b65905b9d
  • SSDEEP 49152:Zyo4+ykWgcPujrzEsEQYKKWaOvewgJk35kId:QpUWLPiEQkWAk35kU
  • TLSH
    T1C3A59C46F709A87AC4FB53364A361A651127CC2A8F83D783695C723C58B76CC0F5AED8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryexecutionimpactpersistenceevasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests changing the default SMS application.

    collectionimpact
  behavioral1behavioral2behavioral3