Extracted

• • Target
    e5b96e80935ca83bbe895f6239eabca1337dc575a066bb6ae2b56faacd29ddaa.apk
  • Size 13.5MB
  • SHA256 e5b96e80935ca83bbe895f6239eabca1337dc575a066bb6ae2b56faacd29ddaa
  • MD5 ab25bfce859ba1bb374eda63e1be92d3
  • SHA1 065e0ef6aab548cdc764aadd4c41ad815fda78f8
  • SHA512 eaac24f849d25477b95d346dd5063d9dd3f550700ac87f29ff6ca6ff80be192b2ffe4cf501af0e991764f92b9c93bb4e4aa48a4ef78b93af1852a7fff1a82938
  • SSDEEP 393216:P9XnFH5macX7X52NWdXJq2TNhMfw6zpMrfum7E:F1ZqgY5b2qE
  • TLSH
    T1D1E6238BFB98C51FD9731632C917413372A31E142492ABBA2315F32819B7D425F96FCA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankerdefense_evasiondiscoveryexecutionimpactpersistence

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Checks the application is allowed to request package installs through the package installer

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    defense_evasion

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  behavioral1behavioral2behavioral3