Extracted

• • Target
    20e8688726e843e9119b33be88ef642cb646f1163dce4109b8b8a2c792b5f9fc.apk
  • Size 13.5MB
  • SHA256 20e8688726e843e9119b33be88ef642cb646f1163dce4109b8b8a2c792b5f9fc
  • MD5 acaed4c74eb9f0c85c603d4077a95697
  • SHA1 6683969c617c5d72dcd1cf32500ed34ecb427ecc
  • SHA512 a41a994d918362c767932cde41552426de32494996d0ce5e6345b1082ff257e09497909264d2d1ce5485416c895dd242f0238eb4036f688733809bd48d7e0114
  • SSDEEP 393216:lYbH5macX7X52NWdXJq2TNhTfwa5pMrfum7j:lYbZqgY56eqj
  • TLSH
    T172E6228BFB98C51FD9731632C917453372A31E0824929BBA2315F32819B7D425F57BCA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankerdefense_evasiondiscoveryexecutionimpactpersistence

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Checks the application is allowed to request package installs through the package installer

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    defense_evasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  behavioral1behavioral2behavioral3