Extracted

• • Target
    N26 Pdf.apk
  • Size 16.2MB
  • SHA256 3c28838841959425662fcf61c0e2e1dda1597d263ca701e2b71ca8c07ee2fd0c
  • MD5 683db68d5fd86c500a94340c69773027
  • SHA1 e7b19094a4a74c6bb3c8d97b3da5ced4ea1a8800
  • SHA512 40e9045e4c44aa381152595425422784b4d11ab3065862d4b65dafa0e8846b465aff9849dbdfe8269b35ccadef4b2a30ed4420d4d9ae963d044a33df37779807
  • SSDEEP 393216:0INHMQm8ydvORFu59K1atifftf0SSl/xvpMFTmV:lpM78yosNitvu/BpMEV
  • TLSH
    T145071206EF44B97AC9F6063798FA59344C824D4047C3D987AD99F45C1C7BAF0AB29BC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  collectioncredential_accessdiscoveryevasionimpactpersistence

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries the mobile country code (MCC)

    discovery
  behavioral1
• • Target
    base.apk
  • Size 9.6MB
  • SHA256 db2c9949fae4e779f1d988d38b67ed9b3612dbf11c1159c791093aeef9cdab2c
  • MD5 c95cd77f0a88b3f74a794d735f547e3b
  • SHA1 216414ab01a1fee5a056c3fb2fc167744002d5e6
  • SHA512 1e64ea334f24358dc52f7949d5e6da39b7018fcd6168c39ed1d7649548e22eab44c4dd37c932c40632fd065ffe048baf69d8b3f7065d2c1b1aa83475acf968e0
  • SSDEEP 196608:OjnYBnjbs1wWwPLCLH+QN4ut1eMS4pOvoQ8Y5QrlHDazK8zlv3FKzre3hmggk:ljo1xwPmLH+luHeF4pOvH8Y5Qrxa7JPN
  • TLSH
    T18DA63382B3495F5AD9636E318D61925841322D1CCFA399177646B33C38FEED18F12FA2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Listens for changes in the sensor environment (might be used to detect emulation)

    defense_evasion
  behavioral2