Extracted

• • Target
    0ace439000c8c950330dd1694858f50b2800becc7154e137314ccbc5b1305f07
  • Size 12.5MB
  • SHA256 0ace439000c8c950330dd1694858f50b2800becc7154e137314ccbc5b1305f07
  • MD5 387ec247610589a40fa2214d8ab8fd1e
  • SHA1 c649c23176986fb9387815bfc284c4e6d4bc9b49
  • SHA512 8152e9bcc366da2b739c161cba37eac36c45ae958226902709fda9967c0eff76c013d3bc18004ae3609809fb725bf318ebc691939c86bea6b92b50e0d595352d
  • SSDEEP 393216:aHTN071ZEVUPoFRKCXKBaAsW17oGcVxM35:azNYAFE9FsGoGai
  • TLSH
    T177D6124BF718493ACCF700714D8A03326A666CC98F92A707B954772CA87B6D41F69BDC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  collectioncredential_accessdefense_evasiondiscoveryimpact

  • Checks if the Android device is rooted.

    defense_evasion

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Acquires the wake lock

  • Queries information about active data network

    discovery

  • Reads information about phone network operator.

    discovery

  • Listens for changes in the sensor environment (might be used to detect emulation)

    defense_evasion
  behavioral1