Extracted

• • Target
    seeham.apk
  • Size 2.3MB
  • SHA256 000e9bc41614fed11331af33052cd360f9347ec8190bc812c18550bbd3b65efb
  • MD5 da49f6bd0259f9c72c07431e4f1ce9d3
  • SHA1 e281d8ffbddcea746db163077568d233f0bbe47d
  • SHA512 376097973ce3a5a7626e216668a09f7d7a7e383c5dd8fe1632445b6e49305a9050a434af9b2cc6024d5daf1285ba0a43e0ba27512f0687468c215b38984328dc
  • SSDEEP 49152:qvtvQvZogoM5GtMiKhkoiwCbFloPOgDwdjMcswgGk35ak:FzoG6MiAkVT3E+jnk35ak
  • TLSH
    T1BCB59C46FB44987EC4F75232463646A29123CC668F83D7876908B27C5DB76CC4F6AEC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery
  behavioral1