Extracted

• • Target
    ready.apk
  • Size 3.7MB
  • SHA256 0ae09740566fe5d25ed7084c7cf4d1ef6b8300a86441f1ebf4eef0e329ed109f
  • MD5 0696194be1ff93de852a727667d6531a
  • SHA1 1b67198a8f5d45c832c6bb289c91c727725bd283
  • SHA512 db544afc22bd287a8ef431116d46538f312fdc201cd4e27b161571f5d079c226709486b550cf5ef08fc8812bb92696ce5ff593fdc8cf43ed49f94eb7fd9e558d
  • SSDEEP 49152:Tbc2pIFjbLh41bfSRkRdoExmmzqzdGGpQTOFRUFYq30cgACghik2v:U3jbLhubYkRdrmmzqzBmTv0tACNv
  • TLSH
    T15706E043FB4ACA9BD4BA83F56F370DA91A170F18C642AAD704147A7E2E771D10EC598C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  bankercollectioncredential_accessdefense_evasiondiscoveryevasionexecutionpersistence

  • Makes use of the framework's Accessibility service

    Retrieves information displayed on the phone screen using AccessibilityService.

    collectiondefense_evasioncredential_access

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Queries information about active data network

    discovery

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3behavioral4behavioral5behavioral6