Extracted

• • Target
    client.apk
  • Size 760KB
  • SHA256 6db892bb9921633415b73799421a00cea90d089960dcf2734f8722fb1bbfe210
  • MD5 f03323c6d037244cf03a674c9e4756a2
  • SHA1 87fc91079eb2042d7044198010ec85cef36b9639
  • SHA512 e593027a815b060f3026eab8ecf533fafbee5c6887c941ed9bc2007d4a6efd0ec191c0e311679a30fbcd70a54dfa962461f0070dd461869c0d3f479b5348d2b3
  • SSDEEP 12288:+XqmTa1a8Lre1vhbJSRz5WmpYshXZPbGwidNpgrdYX:+3a1a2e1lJSRz5WmD9idNpP
  • TLSH
    T160F46C86FB8AF863C9F3C6368275C66AD6164D554B43D7831985B23C09B7AC08B49FCC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  bankerdefense_evasiondiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  behavioral1behavioral2behavioral3