Extracted

• • Target
    b.apk
  • Size 2.5MB
  • SHA256 552200eb6741766066e442c8d1cedd1cb51bd13348514ee672d4c3fa1fa17e85
  • MD5 b62c1e8e5bb9987d2150648dbe82a16f
  • SHA1 b7310b0ac4cba8d1b32fc9372cd051709c2a5085
  • SHA512 9324f7edab8a67c60426b9fae3e5f1277b3523e772bd5416411479264540a17c1bc151e960fd90e16155e86d0ac4aeef6a90a3af796f75608f66dd01faaaaef0
  • SSDEEP 49152:3efbpZnSQyPZeeTOHXuxA4mSxs90B2H1R500frZU:3eXSVXK36AvDSkHG0frZU
  • TLSH
    T194C5DF87F705E86FC9FBC2328939422656476C668E83D6831956723C4DB76C04F9AFC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankercollectiondefense_evasiondiscoveryexecutionkeepspyinfostealerpersistencetrojanimpact

  • Family: KeepSpy

    KeepSpy is an Android malware that hijacks devices to send phishing SMS.

    trojaninfostealerbankerkeepspy

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Queries account information for other applications stored on the device

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection

  • Queries information about running processes on the device

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests changing the default SMS application.

    collectionimpact
  behavioral1behavioral2