Extracted

• • Target
    cba19f8eedf90c332224bcd8f0df9be0e1dbd4324c67c79eef19d547c33ef331.apk
  • Size 9.5MB
  • SHA256 cba19f8eedf90c332224bcd8f0df9be0e1dbd4324c67c79eef19d547c33ef331
  • MD5 abd57a48bfa57c6ad000806e080aa97f
  • SHA1 bf13f68a3b8faf43200a12909cb2fb33b4e578e3
  • SHA512 1182357a2631f74e157ac6637b81eb2e396bb7cded32f70abdf7e7320d01ab6e1e6c538511460109273cf7789fa6266cbda70c4d5c6993ae4a50232a34f78ad1
  • SSDEEP 196608:w71wWwPLCLH+QN4ut1eMSTp7l2olhYrsjdKSCBYNLngukc5kPDmreTTlhW3U0i:g1xwPmLH+luHeF17FjRfjLnguvkrmruL
  • TLSH
    T1CEA63306B38A5B9DE07647734C60A299117B3C19CF63832752017B3C69FB9D90B67EE2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about the current Wi-Fi connection

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery

  • Listens for changes in the sensor environment (might be used to detect emulation)

    defense_evasion
  behavioral1